https://community.cisco.com/t5/network-security/firepower-fmc-log-analysis-dns-results/m-p/4062791#M1069043 <P>Isn't there a way to see what the FQDN is within a DNS request? I have seen some DNS requests to an unexpected external DNS server and I would like to find out what the FQDN was that it sent the request to but I can't seem to find any report or way to see that just digging through logs from the Analysis of connection events. Please help.</P> Thu, 09 Apr 2020 14:35:00 GMT robinsra82 2020-04-09T14:35:00Z https://community.cisco.com/t5/network-security/firepower-fmc-log-analysis-dns-results/m-p/4062791#M1069043 <P>Isn't there a way to see what the FQDN is within a DNS request? I have seen some DNS requests to an unexpected external DNS server and I would like to find out what the FQDN was that it sent the request to but I can't seem to find any report or way to see that just digging through logs from the Analysis of connection events. Please help.</P> Thu, 09 Apr 2020 14:35:00 GMT https://community.cisco.com/t5/network-security/firepower-fmc-log-analysis-dns-results/m-p/4062791#M1069043 robinsra82 2020-04-09T14:35:00Z https://community.cisco.com/t5/network-security/firepower-fmc-log-analysis-dns-results/m-p/4062813#M1069044 <P>It would appear that I answered my own question. There is a DNS Query field and you can search based on that field and it appears to provide the FQDN that was queried.</P> Thu, 09 Apr 2020 15:03:53 GMT https://community.cisco.com/t5/network-security/firepower-fmc-log-analysis-dns-results/m-p/4062813#M1069044 robinsra82 2020-04-09T15:03:53Z https://community.cisco.com/t5/network-security/firepower-fmc-log-analysis-dns-results/m-p/4062829#M1069046 <P>Thanks for sharing your answer. <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Thu, 09 Apr 2020 15:20:39 GMT https://community.cisco.com/t5/network-security/firepower-fmc-log-analysis-dns-results/m-p/4062829#M1069046 Marvin Rhoads 2020-04-09T15:20:39Z