Manage Top DNS Queries Graph Query
Path: /api/chf/graph/top_dns_queries
Method: POST
Request body:
{
[optional] "filter_clause": "<filter bar expression> (e.g. dns_query LIKE '%example.com%' AND dns_failed_transactions > 100)",
[mandatory] "selected_columns": [
"dns_total_transactions",
"dns_response_time_avg_ns"
],
[mandatory] "entries_num": 300,
[optional] "from_timestamp": 1778001660,
[optional] "to_timestamp": 1778088060
}Response:
{
"message": "Success",
"data": {
"uuid": "c8144dc6-8aa0-ae89-1550-542cff5c3bab"
}
}filter_clause is the part which is inserted after a WHERE keyword of an SQL query and qualifies the set of DNS queries shown on the graph. If not provided or null, no filter is applied.
selected_columns are the columns for which the data should be aggregated by time and presented as points on graph. Only columns with is_chartable = true are accepted.
from_timestamp and to_timestamp are the range of requested data. If not provided or null, the minimum/maximum value is used.
entries_num is the maximum number of points on the graph, must not be 0.
Path: /api/chf/graph/top_dns_queries/{uuid}
Method: GET
Path parameter:
uuid - received from the previous requestResponse:
{
"message": "Success",
"data": {
"state": "no_page_no_processing",
"custom_data": {
"interval_sec": 300
},
"page": [
{
"timestamp": 1778001660,
"result": [
{
"dns_total_transactions": 1234,
"dns_response_time_avg_ns": 130076
}
]
}
]
}
}state one of:
has_next - there is the next page, it can be asked for immediatelyno_page_processing - there is no next page yet, but the query it still being processed, maybe it will appear later; sleep for a bit and try againno_page_no_processing - the query processing has finished and there’s no next page; stopcustom_data - additional information that needs to be included with the result:
interval_sec - interval in seconds between timestamps in the page results.page contains data in format above.
Path: /api/chf/graph/top_dns_queries/{uuid}
Method: DELETE
Path parameter:
uuid - received from the previous requestResponse:
{
"message": "Successfully interrupted processing the query (5f966c56-6acb-d5c5-7832-eb29b000f333)",
"data": null
}Path: /api/chf/graph/top_dns_queries/columns
Method: GET
Response:
{
"message": "Success",
"data": [
{
"name": "dns_total_transactions",
"type": "number_units",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_chartable": true
}
]
}dns_querydns_ip_serverdns_num_clientsdns_num_serversdns_response_time_min_nsdns_response_time_avg_nsdns_response_time_max_nsdns_no_request_transactionsdns_no_response_transactionsdns_successful_transactionsdns_failed_transactionsdns_completed_transactionsdns_total_transactionsdns_no_request_transactions_ratiodns_no_response_transactions_ratiodns_successful_transactions_ratiodns_failed_transactions_ratiodns_successful_fast_transactionsdns_successful_moderate_transactionsdns_successful_slow_transactionsdns_successful_fast_transactions_ratiodns_successful_moderate_transactions_ratiodns_successful_slow_transactions_ratiodns_failed_fast_transactionsdns_failed_moderate_transactionsdns_failed_slow_transactionsdns_failed_fast_transactions_ratiodns_failed_moderate_transactions_ratiodns_failed_slow_transactions_ratiodns_total_fast_transactionsdns_total_moderate_transactionsdns_total_slow_transactionsdns_total_fast_transactions_ratiodns_total_moderate_transactions_ratiodns_total_slow_transactions_ratiois_any_packets_writtenhostname_serverhost_groups_serverdns_queryColumns Response:
{
"name": "dns_query",
"type": "string",
"sort_order": null,
"is_selected": true,
"is_enabled": true,
"is_sortable": false,
"is_suggestable": true,
"is_static": true,
"link_details": true,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"LIKE",
"ILIKE"
]
},
"is_groupable": true,
"is_chartable": false
}dns_ip_serverColumns Response:
{
"name": "dns_ip_server",
"type": "ip_address",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": false,
"is_suggestable": true,
"is_static": false,
"link_details": true,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"IN-CIDR",
"NOT-IN-CIDR",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": false,
"column_group_tag": [
"dns_transaction"
]
}dns_num_clientsColumns Response:
{
"name": "dns_num_clients",
"type": "number_units",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": false,
"is_chartable": true,
"column_group_tag": [
"unique_host_count"
]
}dns_num_serversColumns Response:
{
"name": "dns_num_servers",
"type": "number_units",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": false,
"is_chartable": true,
"column_group_tag": [
"unique_host_count"
]
}dns_response_time_min_nsColumns Response:
{
"name": "dns_response_time_min_ns",
"type": "number_ns_threshold",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"threshold": [
150000000,
500000000
],
"column_group_tag": [
"dns_transaction_delay"
]
}dns_response_time_avg_nsColumns Response:
{
"name": "dns_response_time_avg_ns",
"type": "number_ns_threshold",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"threshold": [
150000000,
500000000
],
"column_group_tag": [
"dns_transaction_delay"
]
}dns_response_time_max_nsColumns Response:
{
"name": "dns_response_time_max_ns",
"type": "number_ns_threshold",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"threshold": [
150000000,
500000000
],
"column_group_tag": [
"dns_transaction_delay"
]
}dns_no_request_transactionsColumns Response:
{
"name": "dns_no_request_transactions",
"type": "number_units",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"column_group_tag": [
"dns_status_transactions",
"dns_errors"
]
}dns_no_response_transactionsColumns Response:
{
"name": "dns_no_response_transactions",
"type": "number_units",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"column_group_tag": [
"dns_status_transactions",
"dns_errors"
]
}dns_successful_transactionsColumns Response:
{
"name": "dns_successful_transactions",
"type": "number_units",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"column_group_tag": [
"dns_status_transactions",
"dns_performance_successful_transactions"
]
}dns_failed_transactionsColumns Response:
{
"name": "dns_failed_transactions",
"type": "number_units",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"column_group_tag": [
"dns_status_transactions",
"dns_performance_failed_transactions"
]
}dns_completed_transactionsColumns Response:
{
"name": "dns_completed_transactions",
"type": "number_units",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"column_group_tag": [
"dns_performance_total_transactions"
]
}dns_total_transactionsColumns Response:
{
"name": "dns_total_transactions",
"type": "number_units",
"sort_order": "desc",
"is_selected": true,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"column_group_tag": [
"dns_status_transactions"
]
}dns_no_request_transactions_ratioColumns Response:
{
"name": "dns_no_request_transactions_ratio",
"type": "number_ratio_threshold",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"threshold": [
0.15,
0.3
],
"column_group_tag": [
"dns_status_transactions_ratio"
]
}dns_no_response_transactions_ratioColumns Response:
{
"name": "dns_no_response_transactions_ratio",
"type": "number_ratio_threshold",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"threshold": [
0.15,
0.3
],
"column_group_tag": [
"dns_status_transactions_ratio"
]
}dns_successful_transactions_ratioColumns Response:
{
"name": "dns_successful_transactions_ratio",
"type": "number_ratio_threshold_reversed",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"threshold": [
0.7,
0.85
],
"column_group_tag": [
"dns_status_transactions_ratio"
]
}dns_failed_transactions_ratioColumns Response:
{
"name": "dns_failed_transactions_ratio",
"type": "number_ratio_threshold",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"threshold": [
0.15,
0.3
],
"column_group_tag": [
"dns_status_transactions_ratio"
]
}dns_successful_fast_transactionsColumns Response:
{
"name": "dns_successful_fast_transactions",
"type": "number_units",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"column_group_tag": [
"dns_performance_successful_transactions"
]
}dns_successful_moderate_transactionsColumns Response:
{
"name": "dns_successful_moderate_transactions",
"type": "number_units",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"column_group_tag": [
"dns_performance_successful_transactions"
]
}dns_successful_slow_transactionsColumns Response:
{
"name": "dns_successful_slow_transactions",
"type": "number_units",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"column_group_tag": [
"dns_performance_successful_transactions"
]
}dns_successful_fast_transactions_ratioColumns Response:
{
"name": "dns_successful_fast_transactions_ratio",
"type": "number_ratio",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"column_group_tag": [
"dns_performance_successful_transactions_ratio"
]
}dns_successful_moderate_transactions_ratioColumns Response:
{
"name": "dns_successful_moderate_transactions_ratio",
"type": "number_ratio",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"column_group_tag": [
"dns_performance_successful_transactions_ratio"
]
}dns_successful_slow_transactions_ratioColumns Response:
{
"name": "dns_successful_slow_transactions_ratio",
"type": "number_ratio",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"column_group_tag": [
"dns_performance_successful_transactions_ratio"
]
}dns_failed_fast_transactionsColumns Response:
{
"name": "dns_failed_fast_transactions",
"type": "number_units",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"column_group_tag": [
"dns_performance_failed_transactions"
]
}dns_failed_moderate_transactionsColumns Response:
{
"name": "dns_failed_moderate_transactions",
"type": "number_units",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"column_group_tag": [
"dns_performance_failed_transactions"
]
}dns_failed_slow_transactionsColumns Response:
{
"name": "dns_failed_slow_transactions",
"type": "number_units",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"column_group_tag": [
"dns_performance_failed_transactions"
]
}dns_failed_fast_transactions_ratioColumns Response:
{
"name": "dns_failed_fast_transactions_ratio",
"type": "number_ratio",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"column_group_tag": [
"dns_performance_failed_transactions_ratio"
]
}dns_failed_moderate_transactions_ratioColumns Response:
{
"name": "dns_failed_moderate_transactions_ratio",
"type": "number_ratio",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"column_group_tag": [
"dns_performance_failed_transactions_ratio"
]
}dns_failed_slow_transactions_ratioColumns Response:
{
"name": "dns_failed_slow_transactions_ratio",
"type": "number_ratio",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"column_group_tag": [
"dns_performance_failed_transactions_ratio"
]
}dns_total_fast_transactionsColumns Response:
{
"name": "dns_total_fast_transactions",
"type": "number_units",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"column_group_tag": [
"dns_performance_total_transactions"
]
}dns_total_moderate_transactionsColumns Response:
{
"name": "dns_total_moderate_transactions",
"type": "number_units",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"column_group_tag": [
"dns_performance_total_transactions"
]
}dns_total_slow_transactionsColumns Response:
{
"name": "dns_total_slow_transactions",
"type": "number_units",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"column_group_tag": [
"dns_performance_total_transactions"
]
}dns_total_fast_transactions_ratioColumns Response:
{
"name": "dns_total_fast_transactions_ratio",
"type": "number_ratio_threshold",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"threshold": [
1.0,
1.0
],
"column_group_tag": [
"dns_performance_total_transactions_ratio"
]
}dns_total_moderate_transactions_ratioColumns Response:
{
"name": "dns_total_moderate_transactions_ratio",
"type": "number_ratio_threshold",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"threshold": [
0.0,
1.0
],
"column_group_tag": [
"dns_performance_total_transactions_ratio"
]
}dns_total_slow_transactions_ratioColumns Response:
{
"name": "dns_total_slow_transactions_ratio",
"type": "number_ratio_threshold",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": true,
"is_suggestable": false,
"is_static": false,
"link_details": false,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!=",
"<",
">",
"<=",
">=",
"IN-RANGE",
"NOT-IN-RANGE"
]
},
"is_chartable": true,
"threshold": [
0.0,
0.0
],
"column_group_tag": [
"dns_performance_total_transactions_ratio"
]
}is_any_packets_writtenColumns Response:
{
"name": "is_any_packets_written",
"type": "pcap_download_link",
"sort_order": null,
"is_selected": true,
"is_enabled": false,
"is_sortable": false,
"is_suggestable": false,
"is_static": false,
"link_details": true,
"is_filterable": false,
"is_groupable": false,
"is_hidden": true,
"is_chartable": false
}hostname_serverColumns Response:
{
"name": "hostname_server",
"type": "string",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": false,
"is_suggestable": false,
"is_static": false,
"link_details": true,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"=",
"!="
]
},
"is_chartable": false,
"column_group_tag": [
"hostnames"
]
}host_groups_serverColumns Response:
{
"name": "host_groups_server",
"type": "tags_list",
"sort_order": null,
"is_selected": false,
"is_enabled": true,
"is_sortable": false,
"is_suggestable": false,
"is_static": false,
"link_details": true,
"is_filterable": true,
"filter_options": {
"filter_operators": [
"="
]
},
"is_chartable": false,
"column_group_tag": [
"host_groups"
]
}