6
How to download logs?
You can download your logs by going on my.nextdns.io in the Settings tab, and click the "Download logs" button in the Logs section. All your logs are packaged and sent as a single CSV file delimited by comas.
The file has the following columns:
Name | Description |
---|---|
timestamp | Time of the query. |
domain | The fully qualified queried domain name (this column is only available if "Log domains" is checked in the settings).. |
query_type | The DNS query type. |
dnssec | Wether the response was signed using DNSSEC. |
protocol | The name of the protocol used by the client (eg: DNS-over-HTTPS). |
client_ip | Public IP of the client performing the client (this column is only available if "Log clients IPs" is checked in the settings). |
status | Status of the filtering. If empty, no blocklist, denylist or allowlist matched, otherwise it can be either blocked or allowed. |
reasons | List of reasons why the query was either blocked or allowed. |
destination_country | The country of the IP(s) from the response. |
root_domain | The root domain of the queried domain (eg: the root domain of dns.nextdns.io is nextdns.io). The root domain can sometime be a more qualified domain when those domains are considered public suffixes. |
device_id | The id associated to the device performing the query. Note that device ids are unique per configuration, the same device will have a different id from one configuration to the next. This value is only available when client identification feature is enabled in the client. |
device_name | The device name reported by the device performing the query. This value is only available when client identification feature is enabled in the client. |
device_model | The device model reported by the device performing the query. This value is only available when client identification feature is enabled in the client. |
matched_name | The domain which matched the list when different from the queried domain. This happens when the queried domain points to a CNAME, and the CNAME is blocked, not the queried name. |
client_name | The detected client (eg: nextdns-ios, dnscrypt). |
Reply
Content aside
Related Articles