xPi-Hole DNS and Ad-Blocker Analytics

Comprehensive Pi-Hole analytics for Splunk. Monitor DNS queries, ad blocking effectiveness, client behavior, and geographic destinations with CIM/OCSF compliance.Built by JYOTHIS EDATHOOT

Default Version 1.0.3

December 24, 2025

Compatibility

Splunk Enterprise, Splunk Cloud

Platform Version: 10.5, 10.4, 10.3, 10.2, 10.1, 10.0, 9.4, 9.3, 9.2, 9.1, 9.0

CIM Version: 6.x, 5.x

Rating

(1)

Support

Developer Supported

xPi-Hole DNS and Ad-Blocker Analytics transforms your Pi-Hole DNS data into actionable insights with enterprise-grade analytics and visualizations. Key Features: - 6 production-ready dashboards with 52+ visualizations - Real-time DNS query and ad blocking analytics - Per-client behavioral analysis and performance metrics - Geographic destination mapping with choropleth and marker maps - Full Splunk CIM and OCSF compliance for Enterprise Security integration - 27 event types for granular searching and alerting - UI-based configuration - no file editing required Monitoring Capabilities: - DNS query volume, types, and patterns - Ad blocking effectiveness and block source analysis - Cache hit rates and performance metrics - Client device activity and behavior - Geographic distribution of DNS resolutions - Rate limiting and security events Supported Data: - Pi-Hole DNS logs (dnsmasq) - FTL daemon logs - Gravity update logs - Web interface access logs Requirements: - Splunk Enterprise 8.0+ or Splunk Cloud - Pi-Hole v5.0+ Developed by xTechnix Inc. | https://xtechnix.com