In this article

Most reporting tasks start from Insights, including troubleshooting Site deployments, finding threat sources, and identifying inactive users. For query-level detail, the DNS Query Log tracks all DNS traffic and supports filtering, policy updates, and data export.

For a description of each report type, see DNSFilter Dashboard Reporting guide.

Troubleshoot Site deployments

From Insights, view Top Active Sites and the live Active Sites list. Quickly see if a Site is not receiving traffic. For possible causes, see DNSFilter troubleshooting.

Find threat sources

Review threat traffic to support end-user education and locate infected Roaming Clients.

To find threat sources:

1. From Insights, scroll to All requests by domain and select Roaming Client or User from the dropdown menu.
2. Filter by Threats to view the Roaming Clients or Users that are producing blocked traffic.
3. Select a Roaming Client or User name to view all domain requests from that source.
4. Select the more arrow next to a request for details such as the user who made the request, the Filtering Policy, and the IP address.

Monitor time-wasting traffic

Filter by category to see the most-queried types of websites and decide whether policy updates are needed. For example, if teams other than Marketing spend most of their time on Social Networking websites, the Filtering Policies may need to block more access.

To review traffic by category:

1. From Insights, scroll to All requests by domain and select Category from the dropdown menu.
2. Confirm the top categories match the traffic that the Organization expects, or identify Filtering Policy changes that could help productivity.

Clean up inactive users

Use Insights to confirm that the user count is accurate. The same process works for inactive Roaming Clients.

To identify and remove inactive users:

1. From Insights, set the date range to Last 90 days.
2. Scroll to All requests by domain and select User from the dropdown menu.
3. In the list, identify any users without traffic.
4. Navigate to Identities > Users.

5. Select the inactive user and select Delete.

   Alternatively, from the Actions column, select More Actions and then select Delete.

6. Compare the updated user count against the payment plan to confirm billing is accurate. 

   For license usage details, see Review per-user license usage summary.

Allow or block an application

Update AppAware Filtering Policies from the AppAware tab. As with finding threat sources, drill down to an application’s User or Roaming Client traffic to identify which devices send unwanted traffic.

Export threat data from a specific time frame

When Scheduled Reports or the DNS Query Log do not provide the needed data set, or when Data Export is not in use, use Data Explorer. Filter by the attributes that matter most and export the data as a PDF or CSV file.

Export data on a regular schedule

DNSFilter does not store data indefinitely, so export needed data on a regular schedule. Data Export automates the process. Other options are Scheduled Reports, the DNS Query Log, and Data Explorer.

Related content

• DNSFilter Dashboard Reporting guide
• DNS Query Log dashboard navigation
• Create a Scheduled Report
• Data Export configuration