Azure Sentinel - DNS Workbooks - Domain overview RRS feed

  • Question

  • Hi All,

    Please can you advise if is normal to see empty field under "Top domains queried" in DNS workbook.

    DNS screenshot

    My DNS Connector says is connected and we are sending logs from 2 servers.

    DNS Connector

    I was wondering, maybe I should collect some events from the logs below:

    LA Advanced



    Wednesday, January 15, 2020 9:36 AM


  • We recommend engaging our technical support team to investigate further.Please file a support case using these steps. If you do not have a support plan, send mail to, include your subscription ID and a link to this MSDN thread (for context).
    • Marked as answer by Eric20191010 Tuesday, January 28, 2020 3:37 PM
    Tuesday, January 28, 2020 5:43 AM