Read your first queries
Before you start
- You need the
admin,operatororauditorrole to read Query log. - You need a client that uses kudurru for DNS.
1. Find your client
- Open Query log.
- Enter the client address in the Client filter.
- Run
nslookup example.comon that client. - Find
example.comin the table.
Figure 1. Filter the log to find your test query.
If your router forwards DNS, the log can show the router address instead of each client. Give clients the node address directly to see them separately.
2. Explain an answer
- Click the query row to open its details.
- Read the status and the answer.
- Read the upstream, zone or matched list that explains the result.
Figure 2. The details explain why kudurru answered.
| Result | Meaning |
|---|---|
| Forwarded | An upstream DNS server answered |
| Cached | kudurru reused an answer |
| Authoritative | A local zone answered |
| Blocked | A list or policy refused the name |
Check the result
You can find a query from your client and explain its result. Next, add a block list, allow a blocked site, or create a local name.
For charts, time ranges and node selection, see Watch the network.

