Read your first queries

Before you start

  • You need the admin, operator or auditor role to read Query log.
  • You need a client that uses kudurru for DNS.

1. Find your client

  1. Open Query log.
  2. Enter the client address in the Client filter.
  3. Run nslookup example.com on that client.
  4. Find example.com in the table.

The Query log page with domain, client and status filters above the rows of DNS queries.

Figure 1. Filter the log to find your test query.

If your router forwards DNS, the log can show the router address instead of each client. Give clients the node address directly to see them separately.

2. Explain an answer

  1. Click the query row to open its details.
  2. Read the status and the answer.
  3. Read the upstream, zone or matched list that explains the result.

An expanded query row with the matched list, rule and details of a blocked answer.

Figure 2. The details explain why kudurru answered.

ResultMeaning
ForwardedAn upstream DNS server answered
Cachedkudurru reused an answer
AuthoritativeA local zone answered
BlockedA list or policy refused the name

Check the result

You can find a query from your client and explain its result. Next, add a block list, allow a blocked site, or create a local name.

For charts, time ranges and node selection, see Watch the network.

Source: docs/guide/first-steps/queries.md