Share this article
Improve this guide
Steps to enable DNS Query Logging on Windows systems
2 min. read
Updated onOctober 4, 2023
updated onOctober 4, 2023
Share this article
Improve this guide
Read our disclosure page to find out how can you help Windows Report sustain the editorial teamRead more
Microsoft released a new version of the Sysmon tool. The company confirmed thatWindowssystem monitor now supportsDNSquery logging.
This tool is developed by the CTO of Microsoft Azure Mark Russinovich, whoannouncedthe new feature on his official Twitter account. Russinovich attached a screenshot showing how the tool logsDNSqueries and information.
Sysmon with DNS query logging and original file name reporting will publish on Tuesday.pic.twitter.com/0nTKJahjSe
— Mark Russinovich (@markrussinovich)June 8, 2019
Let’s discuss how Sysmon works. It basicallymonitors specific events currently on the systemand then maintains their record in the event log.
But from now onwards, the new Sysmon version bringsDNSquery logging support. Interestingly, you can also spot which query initiated the program by looking at the “Image” value.
How to enableDNS logging on Windows
Finally,DNSlogging is now enabled on your system.
Users are excited about this feature
Windows users are really excited about this new feature. Many users started commenting on the post about how the feature would be beneficial.
It looks like you get more data in one event with this vs the dns client log. If you are already using sysmon this is a big win. Don’t have to ask the windows team to turn onDNSclient logs.
AnotherWindowsuser stated:
Yep so many times I had to fire up message analyzer to grab theprocessmaking theDNSrequest. Really exciting!
What do you think about DNS query logging feature inWindowssystem monitor? Let us know in the comments section below.
RELATED ARTICLES YOU NEED TO CHECK OUT:
DNS server not authoritative for zone error on Command Prompt [FIX]
Fix This: Your DNS Server Might be Unavailable in Windows 8, 8.1, 10
More about the topics:windows 10
Milan Stanojevic
Windows Toubleshooting Expert
Milan has been enthusiastic about technology ever since his childhood days, and this led him to take interest in all PC-related technologies. He’s a PC enthusiast and he spends most of his time learning about computers and technology.
Before joining WindowsReport, he worked as a front-end web developer. Now, he’s one of the Troubleshooting experts in our worldwide team, specializing in Windows errors & software issues.
User forum
0 messages
Sort by:LatestOldestMost Votes
Comment*
Name*
Email*
Commenting as.Not you?
Save information for future comments
Comment
Δ
Milan Stanojevic
Windows Toubleshooting Expert
Before joining WindowsReport, he worked as a front-end web developer. Now, he’s specialized in Windows errors & software issues.
