DDST DNS Analytics for Splunk

The DDST DNS Analytics for Splunk provides a high-level visibility of DNS servers hosted on Linux logs. The goal of the DNS application is permit the administrator or security analyst to quickly see what DNS requests are being used by their users or systems. The DNS application will be updated to help identify bad DNS requests from malware or malicious users.