v51

Swagger 2.0raw.githubusercontent.com2026-06-3000114.1 KB

policy

Retrieves the list of DNS lookups intercepted from all endpoints.

Retrieves the list of DNS lookups intercepted from endpoints, optionally filtered by DNS name, CIDR IP range or source.

get/fqdn/cache

matchpatternstring

A toFQDNs compatible matchPattern expression

cidrstring

A CIDR range of IPs

sourcestring

Source from which FQDN entries come from

Success

ipsstring[]

IP addresses returned in this lookup

fqdnstring

DNS name

ttlinteger

The TTL in the DNS response

lookup-timestring date-time

The absolute time when this data was received

expiration-timestring date-time

The absolute time when this data will expire in this cache

endpoint-idinteger

The endpoint that made this lookup, or 0 for the agent itself.

sourcestring

The reason this FQDN IP association exists. Either a DNS lookup or an ongoing connection to an IP that was created by a DNS lookup.