Report: Histogram

Report: Histogram

Domain frequency data for a given timeframe. User data marked for direct aggregation in either the Edge DNSTAP minimizer or the edge analysis engine are processed into this structure, discarding the source data.

Data

#	Name	Type	Required	Comment
1	start_time	Timestamp	yes	Histogram start time
2	duration	Integer	yes	Histogram length in seconds
3	label0	Bytestring	yes	Top level domain name label (typically TLD, ccTLD or gTLD)
4	label1	Bytestring	nullable	Second domain name label
5	label2	Bytestring	nullable	iThird domain name label
6	label3	Bytestring	nullable	Fourth domain name label
7	label4	Bytestring	nullable	Fifth domain name label
8	label5	Bytestring	nullable	Sixth domain name label
9	label6	Bytestring	nullable	Seventh domain name label
10	label7	Bytestring	nullable	Eighth domain name label
11	label8	Bytestring	nullable	Ninth domain name label
12	label9	list<Bytestring>	nullable	Remaining domain name labels
13	query_count	Uint64	yes	Total number of queries
14	a_count	Uint64	yes	Number of A queries
15	aaaa_count	Uint64	yes	Number of AAAA queries
16	mx_count	Uint64	yes	Number of MX queries
17	ns_count	Uint64	yes	Number of NS queries
18	other_type__count	Uint64	yes	Query count of other types than the above
19	non_IN_count	Uint64	yes	Number of non-IN class queries
20	ok_count	Uint64	yes	Number of NOERROR queries
21	nx_count	Uint64	yes	Number of NXDOMAIN queries
22	fail_count	Uint64	yes	Number of SERVFAIL queries
23	other_rcode_count	Uint64	yes	Number of queries with other rcodes
24	v4client_count	Bytestring	yes	IPv4 client count HLL+
25	v6client_count	Bytestring	yes	IPv6 client count HLL+