Enriching Flows with the Infoblox DNS Data

vRealize Network Insight supports two sources of DNS information:

• Imported CSV file
• Infoblox DNS

Note: If there is a conflict between Infoblox DNS and the CSV file, the information from Infoblox DNS takes precedence.

You can use various search queries to find out more about the source of DNS entries in a flow.

Table 1.

Keyword	Sample Search Query	Description
DNS Provider	Flows where DNS Provider='Infoblox'	Provides the list of flows in which the DNS data is obtained from Infoblox.
DNS Provider	Flows where DNS Provider='CSV'	Provides the list of flows in which the DNS data is obtained from CSV.
Source DNS Provider	Flows where Source DNS Provider='Infoblox'	Provides the list of flows in which the DNS provider for the source IP address is Infoblox.
Destination DNS Provider	Flows where Destination DNS provider='Infoblox'	Provides the list of flows in which the DNS provider for the destination IP address is Infoblox.