Get-B1DFPLog¶
SYNOPSIS¶
Queries the BloxOneDDI DFP Log
SYNTAX¶
Get-B1DFPLog [[-Query] <String>] [[-IP] <String>] [[-Type] <String>] [[-Response] <String>]
[[-Network] <String[]>] [[-Start] <DateTime>] [[-End] <DateTime>] [[-OrderBy] <String>] [[-Order] <String>]
[[-Limit] <Int32>] [[-Offset] <Int32>] [<CommonParameters>]
DESCRIPTION¶
This function is used to query the BloxOneDDI DFP (DNS Forwarding Proxy) Logs. This is the log which contains all DNS Security related events.
EXAMPLES¶
EXAMPLE 1¶
Get-B1DFPLog -IP "10.10.132.10" -Query "google.com" -Type "A" -Response "216.58.201.110" -Start (Get-Date).AddHours(-6) -End (Get-Date) -Limit 1000 -Offset 0
EXAMPLE 2¶
PARAMETERS¶
-Query¶
Use this parameter to filter the DFP Logs by hostname or FQDN
Type: String
Parameter Sets: (All)
Aliases:
Required: False
Position: 1
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
-IP¶
Used to filter the DFP Log by IP Address
Type: String
Parameter Sets: (All)
Aliases:
Required: False
Position: 2
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
-Type¶
Used to filter the DFP Log by query type, such as "A" or "CNAME"
Type: String
Parameter Sets: (All)
Aliases:
Required: False
Position: 3
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
-Response¶
Use this parameter to filter the DFP Log by the response, i.e "NXDOMAIN"
Type: String
Parameter Sets: (All)
Aliases:
Required: False
Position: 4
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
-Network¶
Filter the DFP Logs by one or more DFP Servers, External Networks & BloxOne Endpoints (i.e "mybloxoneddihost.mydomain.corp (DFP)" or "mybloxoneddihost1.mydomain.corp (DFP)","mybloxoneddihost2.mydomain.corp (DFP)","BloxOne Endpoint"
Type: String[]
Parameter Sets: (All)
Aliases:
Required: False
Position: 5
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
-Start¶
A date parameter used as the starting date/time of the log search. By default, the search will start from 24hrs ago and returns the latest results first. You may need to increase the -Limit parameter or reduce the -End date/time to view earlier events.
Type: DateTime
Parameter Sets: (All)
Aliases:
Required: False
Position: 6
Default value: (Get-Date).AddDays(-1)
Accept pipeline input: False
Accept wildcard characters: False
-End¶
A date parameter used as the end date/time of the log search.
Type: DateTime
Parameter Sets: (All)
Aliases:
Required: False
Position: 7
Default value: (Get-Date)
Accept pipeline input: False
Accept wildcard characters: False
-OrderBy¶
The field in which to order the results by. This field supports auto-complete, and defaults to timestamp.
Type: String
Parameter Sets: (All)
Aliases:
Required: False
Position: 8
Default value: Timestamp
Accept pipeline input: False
Accept wildcard characters: False
-Order¶
The direction to order results in. This defaults to ascending.
Type: String
Parameter Sets: (All)
Aliases:
Required: False
Position: 9
Default value: Asc
Accept pipeline input: False
Accept wildcard characters: False
-Limit¶
Use this parameter to limit the quantity of results. The default number of results is 100.
Type: Int32
Parameter Sets: (All)
Aliases:
Required: False
Position: 10
Default value: 100
Accept pipeline input: False
Accept wildcard characters: False
-Offset¶
Use this parameter to offset the results by the value entered for the purpose of pagination
Type: Int32
Parameter Sets: (All)
Aliases:
Required: False
Position: 11
Default value: 0
Accept pipeline input: False
Accept wildcard characters: False
CommonParameters¶
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.