Our consul agent receives lots of request now, is there a way to know the top domains?

I can see the graph from consul.dns.domain_query.count very high, how can I know which domain the client querying?

Hi @wd1!

Not sure whether you have found the answer to this. Sharing it here for future reference.

The DNS name being queried will get logged as DEBUG log. You can run consul monitor -log-level debug against the agent where you have the DNS running to see the name being queried.

Example Log:

    2021/03/15 14:32:59 [DEBUG] dns: request for name consul.service.consul. type A class IN (took 220.766µs) from client 127.0.0.1:55840 (udp)