6

How to download logs?

You can download your logs by going on my.nextdns.io in the Settings tab, and click the "Download logs" button in the Logs section. All your logs are packaged and sent as a single CSV file delimited by comas.

The file has the following columns:

Name Description
timestamp Time of the query.
domain The fully qualified queried domain name (this column is only available if "Log domains" is checked in the settings)..
query_type The DNS query type
dnssec Wether the response was signed using DNSSEC.
protocol The name of the protocol used by the client (eg: DNS-over-HTTPS).
client_ip Public IP of the client performing the client (this column is only available if "Log clients IPs" is checked in the settings).
status Status of the filtering. If empty, no blocklist, denylist or allowlist matched, otherwise it can be either blocked or allowed.
reasons List of reasons why the query was either blocked or allowed.
destination_country The country of the IP(s) from the response.
root_domain The root domain of the queried domain (eg: the root domain of dns.nextdns.io is nextdns.io). The root domain can sometime be a more qualified domain when those domains are considered public suffixes.
device_id The id associated to the device performing the query. Note that device ids are unique per configuration, the same device will have a different id from one configuration to the next. This value is only available when client identification feature is enabled in the client.
device_name The device name reported by the device performing the query. This value is only available when client identification feature is enabled in the client.
device_model The device model reported by the device performing the query. This value is only available when client identification feature is enabled in the client.
matched_name The domain which matched the list when different from the queried domain. This happens when the queried domain points to a CNAME, and the CNAME is blocked, not the queried name.
client_name The detected client (eg: nextdns-ios, dnscrypt).

Reply

null