Blog Post

Core Infrastructure and Security Blog
6 MIN READ

Secrets from the Deep – The DNS Analytical Log – Part 1

EJansen's avatar
EJansen
Icon for Microsoft rankMicrosoft
Nov 11, 2020
Hi Team, it's Eric Jansen again, here in part one of a series of discussions revolving around the extremely exciting topic of the DNS Analytical Log.  Alright, maybe it's not that exciting, so crack ...
Updated Mar 28, 2022
Version 16.0
EricJansen
KellyLynch's avatar
KellyLynch
Copper Contributor
Jul 22, 2021

Hello EJansen,

 

Did reading the ETW events displayed in the image under the text "I trust what I see above, but let's verify to see what's being logged" require stopping the DNS Analytical logging?

 

If not, which PowerShell command was used to read the log records? If it was stopped, is there a way to read those events while DNS Analytical logging is still enabled and writing new records?

 

Thank you,

Kelly Lynch