Type to search.

Infoblox BloxOne DDI

Serverless Observability

Elastic Cloud Serverless projects are autoscaled environments, fully managed by Elastic and available on Elastic Cloud.

Availability

  • Generally available

    This functionality is generally available and ready for production usage.

Serverless Security

Elastic Cloud Serverless projects are autoscaled environments, fully managed by Elastic and available on Elastic Cloud.

Availability

  • Generally available

    This functionality is generally available and ready for production usage.

Stack 9.1+

The Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats.

Availability

  • Generally available since 9.1

    This functionality is generally available and ready for production usage.

Unless stated otherwise on the page, this functionality is available when your Elastic Stack is deployed on Elastic Cloud Hosted, Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, and self-managed environments.

This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes.

Version 1.26.0 (View all)
Managed integration release status GA
Subscription level
What's this?
Basic
Developed by
What's this?
Elastic
Ingestion method(s) API
Minimum Kibana version(s) 9.1.4
9.0.7
8.19.4
Important - Managed integrations on Elastic Cloud Hosted The Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats. Availability Generally available since 9.5 This functionality is generally available and ready for production usage. Unless stated otherwise on the page, this functionality is available when your Elastic Stack is deployed on Elastic Cloud Hosted, Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, and self-managed environments. This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes.

You can use this integration as an Elastic Managed integration on Elastic Cloud Hosted deployments running this version or later.

The Infoblox BloxOne DDI integration allows you to monitor DNS, DHCP and IP address management activity. DDI is the foundation of core network services that enables all communications over an IP-based network.

Use the Infoblox BloxOne DDI integration to collects and parses data from the REST APIs and then visualize that data in Kibana.

Elastic Managed integrations are only supported on Elastic Cloud Serverless and Elastic Cloud Hosted deployments. An Elastic Managed integration lets you ingest data from a cloud source while avoiding the orchestration, management, and maintenance associated with standard ingest infrastructure. Elastic runs the collector for you, so you can focus on your data instead of the infrastructure that collects it.

For more information, refer to Elastic Managed integrations and the Elastic Managed integrations FAQ.

The Infoblox BloxOne DDI integration collects logs for three types of events: DHCP lease, DNS data and DNS config.

DHCP Lease is a Infoblox BloxOne DDI service that stores information about leases. See more details about its API here.

DNS Config is a Infoblox BloxOne DDI service that provides cloud-based DNS configuration with on-prem host serving DNS protocol. See more details about its API here.

DNS Data is a Infoblox BloxOne DDI service providing primary authoritative zone support. DNS Data is authoritative for all DNS resource records and is acting as a primary DNS server. See more details about its API here.

You need Elasticsearch for storing and searching your data and Kibana for visualizing and managing it. You can use our hosted Elasticsearch Service on Elastic Cloud, which is recommended, or self-manage the Elastic Stack on your own hardware.

This module has been tested against Infoblox BloxOne DDI API (v1).

  1. Log on to the Cloud Services Portal.
  2. Go to <User_Name> -> User Profile.
  3. Go to User API Keys page.
  4. Click Create to create a new API key. Specify the following:
    • Name: Specify the name of the key.
    • Expires at: Specify the expiry.
  5. Click Save & Close. The API Access Key Generated dialog is shown.
  6. Click Copy.
  1. In Kibana go to Management > Integrations.
  2. In the "Search for integrations" search bar, type Infoblox BloxOne DDI.
  3. Click on Infoblox BloxOne DDI integration from the search results.
  4. Click on Add Infoblox BloxOne DDI button to add Infoblox BloxOne DDI integration.
  5. Enable the Integration to collect logs via API.

This is the dhcp_lease dataset.

Example
JSON
{
    "@timestamp": "2022-07-11T11:51:15.417Z",
    "agent": {
        "ephemeral_id": "a0aed28a-27c4-4799-befb-9c016ea01c22",
        "id": "38c43078-1bd7-472a-9168-2bf8fc840506",
        "name": "elastic-agent-21477",
        "type": "filebeat",
        "version": "8.19.4"
    },
    "client": {
        "user": {
            "id": "abc3212abc"
        }
    },
    "data_stream": {
        "dataset": "infoblox_bloxone_ddi.dhcp_lease",
        "namespace": "81544",
        "type": "logs"
    },
    "ecs": {
        "version": "8.11.0"
    },
    "elastic_agent": {
        "id": "38c43078-1bd7-472a-9168-2bf8fc840506",
        "snapshot": false,
        "version": "8.19.4"
    },
    "event": {
        "agent_id_status": "verified",
        "category": [
            "network"
        ],
        "created": "2025-12-16T13:25:21.440Z",
        "dataset": "infoblox_bloxone_ddi.dhcp_lease",
        "end": "2022-07-11T11:51:15.417Z",
        "ingested": "2025-12-16T13:25:24Z",
        "kind": "event",
        "original": "{\"address\":\"81.2.69.192\",\"client_id\":\"abc3212abc\",\"ends\":\"2022-07-11T11:51:15.417Z\",\"fingerprint\":\"ab3213cbabab/abc23bca\",\"fingerprint_processed\":\"12abca32bca32abcd\",\"ha_group\":\"abc321cdcbda321\",\"hardware\":\"00:00:5E:00:53:00\",\"host\":\"admin\",\"hostname\":\"Host1\",\"iaid\":0,\"last_updated\":\"2022-07-11T11:51:15.417Z\",\"options\":{\"message\":\"Hello\"},\"preferred_lifetime\":\"2022-07-11T11:51:15.417Z\",\"protocol\":\"ip4\",\"space\":\"DHCP lease Space\",\"starts\":\"2022-07-14T11:51:15.417Z\",\"state\":\"used\",\"type\":\"DHCP lease Type\"}",
        "start": "2022-07-14T11:51:15.417Z",
        "type": [
            "protocol"
        ]
    },
    "host": {
        "hostname": "Host1",
        "name": "admin"
    },
    "infoblox_bloxone_ddi": {
        "dhcp_lease": {
            "address": "81.2.69.192",
            "client_id": "abc3212abc",
            "ends": "2022-07-11T11:51:15.417Z",
            "fingerprint": {
                "processed": "12abca32bca32abcd",
                "value": "ab3213cbabab/abc23bca"
            },
            "ha_group": "abc321cdcbda321",
            "hardware": "00-00-5E-00-53-00",
            "host": "admin",
            "hostname": "Host1",
            "iaid": 0,
            "last_updated": "2022-07-11T11:51:15.417Z",
            "options": {
                "message": "Hello"
            },
            "preferred_lifetime": "2022-07-11T11:51:15.417Z",
            "protocol": "ipv4",
            "space": "DHCP lease Space",
            "starts": "2022-07-14T11:51:15.417Z",
            "state": "used",
            "type": "DHCP lease Type"
        }
    },
    "input": {
        "type": "httpjson"
    },
    "network": {
        "type": "ipv4"
    },
    "related": {
        "hosts": [
            "admin",
            "Host1"
        ],
        "ip": [
            "81.2.69.192"
        ]
    },
    "tags": [
        "preserve_original_event",
        "preserve_duplicate_custom_fields",
        "forwarded",
        "infoblox_bloxone_ddi-dhcp_lease"
    ]
}
Exported fields
Field Description Type
@timestamp Event timestamp. date
cloud.image.id Image ID for the cloud instance. keyword
data_stream.dataset Data stream dataset. constant_keyword
data_stream.namespace Data stream namespace. constant_keyword
data_stream.type Data stream type. constant_keyword
event.dataset Event dataset. constant_keyword
event.module Event module. constant_keyword
host.containerized If the host is a container. boolean
host.os.build OS build information. keyword
host.os.codename OS codename, if any. keyword
infoblox_bloxone_ddi.dhcp_lease.address The IP address of the DHCP lease in the format "a.b.c.d". This address will be marked as leased in IPAM while the lease exists. ip
infoblox_bloxone_ddi.dhcp_lease.client_id The client ID of the DHCP lease. It might be empty. keyword
infoblox_bloxone_ddi.dhcp_lease.ends The time when the DHCP lease will expire. date
infoblox_bloxone_ddi.dhcp_lease.fingerprint.processed Indicates if the DHCP lease has been fingerprinted. keyword
infoblox_bloxone_ddi.dhcp_lease.fingerprint.value The DHCP fingerprint of the lease. keyword
infoblox_bloxone_ddi.dhcp_lease.ha_group The resource identifier. keyword
infoblox_bloxone_ddi.dhcp_lease.hardware The hardware address of the DHCP lease. This specifies the MAC address of the network interface on which the lease will be used. It consists of six groups of two hex digits in lower-case separated by colons. For example, "aa:bb:cc:dd:ee:ff". keyword
infoblox_bloxone_ddi.dhcp_lease.host The resource identifier. keyword
infoblox_bloxone_ddi.dhcp_lease.hostname The client hostname of the DHCP lease. This specifies the host name that the DHCP client sends to the DHCP server using DHCP option 12. It is a fully qualified domain name, consisting of a series of labels separated by dots. For example, "www.infoblox.com". It might be empty. keyword
infoblox_bloxone_ddi.dhcp_lease.iaid Identity Association Identifier (IAID) of the lease. Applicable only for DHCPv6. long
infoblox_bloxone_ddi.dhcp_lease.last_updated The time when the DHCP lease was last updated. date
infoblox_bloxone_ddi.dhcp_lease.options The DHCP options of the lease in JSON format. flattened
infoblox_bloxone_ddi.dhcp_lease.preferred_lifetime The preferred time when the DHCP lease should expire. Applicable only for DHCPv6. date
infoblox_bloxone_ddi.dhcp_lease.protocol Lease protocol type. keyword
infoblox_bloxone_ddi.dhcp_lease.space The resource identifier. keyword
infoblox_bloxone_ddi.dhcp_lease.starts The time when the DHCP lease was issued. date
infoblox_bloxone_ddi.dhcp_lease.state The state of the DHCP lease. keyword
infoblox_bloxone_ddi.dhcp_lease.type Lease type. keyword
input.type Input type keyword
log.offset Log offset long

This is the dns_config dataset.

Example
JSON
{
    "@timestamp": "2022-07-15T06:55:25.978Z",
    "agent": {
        "ephemeral_id": "806e7bde-8e45-44ce-ad5c-45a841e24e74",
        "id": "b13acf6c-b7b9-4287-98b6-e7a3b520cd37",
        "name": "elastic-agent-35000",
        "type": "filebeat",
        "version": "8.19.4"
    },
    "data_stream": {
        "dataset": "infoblox_bloxone_ddi.dns_config",
        "namespace": "12451",
        "type": "logs"
    },
    "dns": {
        "answers": {
            "ttl": 350
        }
    },
    "ecs": {
        "version": "8.11.0"
    },
    "elastic_agent": {
        "id": "b13acf6c-b7b9-4287-98b6-e7a3b520cd37",
        "snapshot": false,
        "version": "8.19.4"
    },
    "event": {
        "agent_id_status": "verified",
        "category": [
            "network"
        ],
        "created": "2022-07-15T06:55:25.978Z",
        "dataset": "infoblox_bloxone_ddi.dns_config",
        "id": "adv12rgfh",
        "ingested": "2025-12-16T13:26:12Z",
        "kind": "event",
        "original": "{\"add_edns_option_in_outgoing_query\":true,\"comment\":\"DNS Config Comment\",\"created_at\":\"2022-07-15T06:55:25.978Z\",\"custom_root_ns\":[{\"address\":\"81.2.69.192\",\"fqdn\":\"custom fqdn\",\"protocol_fqdn\":\"custom protocol fqdn\"}],\"custom_root_ns_enabled\":true,\"disabled\":true,\"dnssec_enable_validation\":true,\"dnssec_enabled\":true,\"dnssec_root_keys\":[{\"algorithm\":30,\"protocol_zone\":\"Dnssec root protocol zone\",\"public_key\":\"Dnssec root Public Key\",\"sep\":true,\"zone\":\"Dnssec root Zone\"}],\"dnssec_trust_anchors\":[{\"algorithm\":10,\"protocol_zone\":\"Dnssec trust protocol zone\",\"public_key\":\"Dnssec trust Public Key\",\"sep\":true,\"zone\":\"Dnssec trust zone\"}],\"dnssec_validate_expiry\":true,\"ecs_enabled\":true,\"ecs_forwarding\":true,\"ecs_prefix_v4\":22,\"ecs_prefix_v6\":33,\"ecs_zones\":[{\"access\":\"ecs zones access\",\"fqdn\":\"ecs zones fqdn\",\"protocol_fqdn\":\"ecs zones protocol fqdn\"}],\"edns_udp_size\":568,\"forwarders\":[{\"address\":\"81.2.69.192\",\"fqdn\":\"forwarders fqdn\",\"protocol_fqdn\":\"forwarders protocol fqdn\"}],\"forwarders_only\":true,\"gss_tsig_enabled\":true,\"id\":\"adv12rgfh\",\"inheritance_sources\":{\"add_edns_option_in_outgoing_query\":{\"action\":\"inherit\",\"display_name\":\"displaynameadd_edns_option_in_outgoing_query\",\"source\":\"sourceadd_edns_option_in_outgoing_query\",\"value\":true},\"custom_root_ns_block\":{\"action\":\"override\",\"display_name\":\"displaynamecustom_root_ns_block\",\"source\":\"sourcecustom_root_ns_block\",\"value\":{\"custom_root_ns\":[{\"address\":\"67.43.156.0\",\"fqdn\":\"fqdn_custom_root_ns\",\"protocol_fqdn\":\"protocolfqdn_custom_root_ns\"}],\"custom_root_ns_enabled\":true}},\"dnssec_validation_block\":{\"action\":\"inherit\",\"display_name\":\"displaynamednssec_validation_block\",\"source\":\"sourcednssec_validation_block\",\"value\":{\"dnssec_enable_validation\":true,\"dnssec_enabled\":true,\"dnssec_trust_anchors\":[{\"algorithm\":8,\"protocol_zone\":\"protocolzonednssec_trust_anchors\",\"public_key\":\"publickeydnssec_trust_anchors\",\"sep\":false,\"zone\":\"is3zone\"}],\"dnssec_validate_expiry\":true}},\"ecs_block\":{\"action\":\"inherit\",\"display_name\":\"displaynameecs_block\",\"source\":\"sourceecs_block\",\"value\":{\"ecs_enabled\":false,\"ecs_forwarding\":true,\"ecs_prefix_v4\":4,\"ecs_prefix_v6\":10,\"ecs_zones\":[{\"access\":\"inherit\",\"fqdn\":\"fqdnecs_block\",\"protocol_fqdn\":\"protocol_fqdnecs_block\"}]}},\"ecs_zones\":{\"action\":\"override\",\"display_name\":\"displaynameecs_zones\",\"source\":\"sourceecs_zones\",\"value\":{\"ecs_enabled\":false,\"ecs_forwarding\":true,\"ecs_prefix_v4\":4,\"ecs_prefix_v6\":12,\"ecs_zones\":[{\"access\":\"access_ecs_zones\",\"fqdn\":\"fqdn_ecs_zones\",\"protocol_fqdn\":\"protocolfqdn_ecs_zones\"}]}},\"edns_udp_size\":{\"action\":\"inherit\",\"display_name\":\"displaynameedns_udp_size\",\"source\":\"sourceedns_udp_size\",\"value\":55},\"forwarders_block\":{\"action\":\"inherit\",\"display_name\":\"displaynameforwarders_block\",\"source\":\"sourceforwarders_block\",\"value\":{\"forwarders\":[{\"address\":\"89.160.20.128\",\"fqdn\":\"forwarders_fqdn\",\"protocol_fqdn\":\"forwarders_protocolfqdn\"}],\"forwarders_only\":true}},\"gss_tsig_enabled\":{\"action\":\"inherit\",\"display_name\":\"displaynamegss_tsig_enabled\",\"source\":\"sourcegss_tsig_enabled\",\"value\":true},\"lame_ttl\":{\"action\":\"inherit\",\"display_name\":\"displaynamelame_ttl\",\"source\":\"sourcelame_ttl\",\"value\":45},\"match_recursive_only\":{\"action\":\"inherit\",\"display_name\":\"displaynamematch_recursive_only\",\"source\":\"sourcematch_recursive_only\",\"value\":false},\"max_cache_ttl\":{\"action\":\"inherit\",\"display_name\":\"displaynamemax_cache_ttl\",\"source\":\"sourcemax_cache_ttl\",\"value\":13},\"max_negative_ttl\":{\"action\":\"inherit\",\"display_name\":\"displaynamemax_negative_ttl\",\"source\":\"sourcemax_negative_ttl\",\"value\":12},\"max_udp_size\":{\"action\":\"inherit\",\"display_name\":\"displaynamemax_udp_size\",\"source\":\"sourcemax_udp_size\",\"value\":11},\"minimal_responses\":{\"action\":\"inherit\",\"display_name\":\"displaynameminimal_responses\",\"source\":\"sourceminimal_responses\",\"value\":true},\"notify\":{\"action\":\"inherit\",\"display_name\":\"displayname_notify\",\"source\":\"source_notify\",\"value\":true},\"query_acl\":{\"action\":\"override\",\"display_name\":\"displaynamequery_acl\",\"source\":\"sourcequery_acl\",\"value\":[{\"access\":\"allow\",\"acl\":\"aclvalue_query_acl\",\"address\":\"89.160.20.128\",\"element\":\"elementvaluequery_acl\",\"tsig_key\":{\"algorithm\":\"hmac_sha256\",\"comment\":\"commentquery_acl\",\"key\":\"keyquery_acl\",\"name\":\"namequery_acl\",\"protocol_name\":\"protocolname_query_acl\",\"secret\":\"secretquery_acl\"}}]},\"recursion_acl\":{\"action\":\"override\",\"display_name\":\"displaynamerecursion_acl\",\"source\":\"sourcerecursion_acl\",\"value\":[{\"access\":\"deny\",\"acl\":\"aclrecursion_acl\",\"address\":\"89.160.20.128\",\"element\":\"elementrecursion_acl\",\"tsig_key\":{\"algorithm\":\"hmac_sha384\",\"comment\":\"commentrecursion_acl\",\"key\":\"keyrecursion_acl\",\"name\":\"namerecursion_acl\",\"protocol_name\":\"protocolnamerecursion_acl\",\"secret\":\"secretrecursion_acl\"}}]},\"recursion_enabled\":{\"action\":\"inherit\",\"display_name\":\"displaynamerecursion_enabled\",\"source\":\"sourcerecursion_enabled\",\"value\":true},\"synthesize_address_records_from_https\":{\"action\":\"inherit\",\"display_name\":\"displaynamesynthesize_address_records_from_https\",\"source\":\"sourcesynthesize_address_records_from_https\",\"value\":true},\"transfer_acl\":{\"action\":\"inherit\",\"display_name\":\"displaynametransfer_acl\",\"source\":\"sourcetransfer_acl\",\"value\":[{\"access\":\"allow\",\"acl\":\"acltransfer_acl\",\"address\":\"216.160.83.56\",\"element\":\"elementtransfer_acl\",\"tsig_key\":{\"algorithm\":\"hmac_sha224\",\"comment\":\"commenttransfer_acl\",\"key\":\"keytransfer_acl\",\"name\":\"nametransfer_acl\",\"protocol_name\":\"protocolnametransfer_acl\",\"secret\":\"secrettransfer_acl\"}}]},\"update_acl\":{\"action\":\"override\",\"display_name\":\"displaynameupdate_acl\",\"source\":\"sourceupdate_acl\",\"value\":[{\"access\":\"allow\",\"acl\":\"aclupdate_acl\",\"address\":\"216.160.83.56\",\"element\":\"elementupdate_acl\",\"tsig_key\":{\"algorithm\":\"hmac_sha384\",\"comment\":\"commentupdate_acl\",\"key\":\"keyupdate_acl\",\"name\":\"nameupdate_acl\",\"protocol_name\":\"protocolnameupdate_acl\",\"secret\":\"secretupdate_acl\"}}]},\"use_forwarders_for_subzones\":{\"action\":\"override\",\"display_name\":\"displaynameuse_forwarders_for_subzones\",\"source\":\"sourceuse_forwarders_for_subzones\",\"value\":false},\"zone_authority\":{\"default_ttl\":{\"action\":\"override\",\"display_name\":\"displaynamezone_authority\",\"source\":\"sourcezone_authority\",\"value\":50},\"expire\":{\"action\":\"inherit\",\"display_name\":\"displaynameexpire\",\"source\":\"sourceexpire\",\"value\":70},\"mname_block\":{\"action\":\"inherit\",\"display_name\":\"displaynamemname_block\",\"source\":\"sourcemname_block\",\"value\":{\"mname\":\"mnamevaluemname_block\",\"protocol_mname\":\"protocolmnamemname_block\",\"use_default_mname\":true}},\"negative_ttl\":{\"action\":\"inherit\",\"display_name\":\"displaynamenegative_ttl\",\"source\":\"sourcenegative_ttl\",\"value\":90},\"protocol_rname\":{\"action\":\"inherit\",\"display_name\":\"displaynameprotocol_rname\",\"source\":\"sourceprotocol_rname\",\"value\":\"valueprotocol_rname\"},\"refresh\":{\"action\":\"inherit\",\"display_name\":\"displayname_refresh\",\"source\":\"source_refresh\",\"value\":40},\"retry\":{\"action\":\"inherit\",\"display_name\":\"displayname_retry\",\"source\":\"source_retry\",\"value\":570},\"rname\":{\"action\":\"inherit\",\"display_name\":\"displayname_rname\",\"source\":\"source_rname\",\"value\":\"value_rname\"}}},\"ip_spaces\":[\"testipspaces\"],\"lame_ttl\":350,\"match_clients_acl\":[{\"access\":\"deny\",\"acl\":\"aclmatch_clients_acl\",\"address\":\"81.2.69.192\",\"element\":\"elementmatch_clients_acl\",\"tsig_key\":{\"algorithm\":\"hmac_sha512\",\"comment\":\"commentmatch_clients_acl\",\"key\":\"keymatch_clients_acl\",\"name\":\"namematch_clients_acl\",\"protocol_name\":\"protocolnamematch_clients_acl\",\"secret\":\"secretmatch_clients_acl\"}}],\"match_destinations_acl\":[{\"access\":\"allow\",\"acl\":\"aclmatch_destinations_acl\",\"address\":\"81.2.69.192\",\"element\":\"elementmatch_destinations_acl\",\"tsig_key\":{\"algorithm\":\"hmac_sha384\",\"comment\":\"commentmatch_destinations_acl\",\"key\":\"keymatch_destinations_acl\",\"name\":\"namematch_destinations_acl\",\"protocol_name\":\"protocolnamematch_destinations_acl\",\"secret\":\"secretmatch_destinations_acl\"}}],\"match_recursive_only\":true,\"max_cache_ttl\":90,\"max_negative_ttl\":500,\"max_udp_size\":890,\"minimal_responses\":true,\"name\":\"string\",\"notify\":true,\"query_acl\":[{\"access\":\"accessquery_acl\",\"acl\":\"aclquery_acl\",\"address\":\"81.2.69.192\",\"element\":\"elementquery_acl\",\"tsig_key\":{\"algorithm\":\"hmac_sha224\",\"comment\":\"commentquery_acl\",\"key\":\"keyquery_acl\",\"name\":\"namequery_acl\",\"protocol_name\":\"protocolnamequery_acl\",\"secret\":\"secretquery_acl\"}}],\"recursion_acl\":[{\"access\":\"allow\",\"acl\":\"aclrecursion_acl\",\"address\":\"81.2.69.192\",\"element\":\"elementrecursion_acl\",\"tsig_key\":{\"algorithm\":\"hmac_sha1\",\"comment\":\"commentrecursion_acl\",\"key\":\"keyrecursion_acl\",\"name\":\"namerecursion_acl\",\"protocol_name\":\"protocolnamerecursion_acl\",\"secret\":\"secretrecursion_acl\"}}],\"recursion_enabled\":true,\"synthesize_address_records_from_https\":false,\"tags\":{\"message\":\"Hello\"},\"transfer_acl\":[{\"access\":\"allow\",\"acl\":\"acltransfer_acl\",\"address\":\"216.160.83.56\",\"element\":\"elementtransfer_acl\",\"tsig_key\":{\"algorithm\":\"hmac_sha224\",\"comment\":\"commenttransfer_acl\",\"key\":\"keytransfer_acl\",\"name\":\"nametransfer_acl\",\"protocol_name\":\"protocolnametransfer_acl\",\"secret\":\"secrettransfer_acl\"}}],\"update_acl\":[{\"access\":\"allow\",\"acl\":\"aclupdate_acl\",\"address\":\"216.160.83.56\",\"element\":\"elementupdate_acl\",\"tsig_key\":{\"algorithm\":\"hmac_sha1\",\"comment\":\"commentupdate_acl\",\"key\":\"keyupdate_acl\",\"name\":\"nameupdate_acl\",\"protocol_name\":\"protocolnameupdate_acl\",\"secret\":\"secretupdate_acl\"}}],\"updated_at\":\"2022-07-15T06:55:25.978Z\",\"use_forwarders_for_subzones\":true,\"zone_authority\":{\"default_ttl\":20,\"expire\":10,\"mname\":\"mnamezone_authority\",\"negative_ttl\":30,\"protocol_mname\":\"protocolmnamezone_authority\",\"protocol_rname\":\"protocolrnamezone_authority\",\"refresh\":50,\"retry\":100,\"rname\":\"string\",\"use_default_mname\":true}}",
        "type": [
            "protocol"
        ]
    },
    "infoblox_bloxone_ddi": {
        "dns_config": {
            "add_edns": {
                "option_in": {
                    "outgoing_query": true
                }
            },
            "comment": "DNS Config Comment",
            "created_at": "2022-07-15T06:55:25.978Z",
            "custom_root_ns": [
                {
                    "address": "81.2.69.192",
                    "fqdn": "custom fqdn",
                    "protocol": {
                        "fqdn": "custom protocol fqdn"
                    }
                }
            ],
            "custom_root_ns_enabled": true,
            "disabled": true,
            "dnssec": {
                "enable_validation": true,
                "enabled": true,
                "root_keys": [
                    {
                        "algorithm": 30,
                        "protocol": {
                            "zone": "Dnssec root protocol zone"
                        },
                        "public": "Dnssec root Public Key",
                        "sep": true,
                        "zone": "Dnssec root Zone"
                    }
                ],
                "trust_anchors": [
                    {
                        "algorithm": 10,
                        "protocol": {
                            "zone": "Dnssec trust protocol zone"
                        },
                        "public_key": "Dnssec trust Public Key",
                        "sep": true,
                        "zone": "Dnssec trust zone"
                    }
                ],
                "validate_expiry": true
            },
            "ecs": {
                "enabled": true,
                "forwarding": true,
                "prefix_v4": 22,
                "prefix_v6": 33,
                "zones": [
                    {
                        "access": "ecs zones access",
                        "fqdn": "ecs zones fqdn",
                        "protocol": {
                            "fqdn": "ecs zones protocol fqdn"
                        }
                    }
                ]
            },
            "edns": {
                "udp": {
                    "size": 568
                }
            },
            "forwarders": [
                {
                    "address": "81.2.69.192",
                    "fqdn": "forwarders fqdn",
                    "protocol": {
                        "fqdn": "forwarders protocol fqdn"
                    }
                }
            ],
            "forwarders_only": true,
            "gss_tsig_enabled": true,
            "id": "adv12rgfh",
            "inheritance": {
                "sources": {
                    "add_edns": {
                        "option_in": {
                            "outgoing_query": {
                                "action": "inherit",
                                "display": {
                                    "name": "displaynameadd_edns_option_in_outgoing_query"
                                },
                                "source": "sourceadd_edns_option_in_outgoing_query",
                                "value": true
                            }
                        }
                    },
                    "custom_root_ns": {
                        "block": {
                            "action": "override",
                            "display": {
                                "name": "displaynamecustom_root_ns_block"
                            },
                            "source": "sourcecustom_root_ns_block",
                            "value": [
                                {
                                    "address": "67.43.156.0",
                                    "fqdn": "fqdn_custom_root_ns",
                                    "protocol": {
                                        "fqdn": "protocolfqdn_custom_root_ns"
                                    }
                                }
                            ],
                            "value_enabled": true
                        }
                    },
                    "dnssec": {
                        "validation": {
                            "block": {
                                "action": "inherit",
                                "display": {
                                    "name": "displaynamednssec_validation_block"
                                },
                                "source": "sourcednssec_validation_block",
                                "value": {
                                    "enable": true,
                                    "enabled": true,
                                    "trust_anchors": [
                                        {
                                            "algorithm": 8,
                                            "protocol": {
                                                "zone": "protocolzonednssec_trust_anchors"
                                            },
                                            "public_key": "publickeydnssec_trust_anchors",
                                            "sep": false,
                                            "zone": "is3zone"
                                        }
                                    ],
                                    "validate_expiry": true
                                }
                            }
                        }
                    },
                    "ecs": {
                        "block": {
                            "action": "inherit",
                            "display": {
                                "name": "displaynameecs_block"
                            },
                            "source": "sourceecs_block",
                            "value": {
                                "enabled": false,
                                "forwarding": true,
                                "prefix_v4": 4,
                                "prefix_v6": 10,
                                "zones": [
                                    {
                                        "access": "inherit",
                                        "fqdn": "fqdnecs_block",
                                        "protocol": {
                                            "fqdn": "protocol_fqdnecs_block"
                                        }
                                    }
                                ]
                            }
                        }
                    },
                    "edns": {
                        "udp": {
                            "size": {
                                "action": "inherit",
                                "display": {
                                    "name": "displaynameedns_udp_size"
                                },
                                "source": "sourceedns_udp_size",
                                "value": 55
                            }
                        }
                    },
                    "forwarders": {
                        "block": {
                            "action": "inherit",
                            "display": {
                                "name": "displaynameforwarders_block"
                            },
                            "source": "sourceforwarders_block",
                            "value": [
                                {
                                    "address": "89.160.20.128",
                                    "fqdn": "forwarders_fqdn",
                                    "protocol": {
                                        "fqdn": "forwarders_protocolfqdn"
                                    }
                                }
                            ],
                            "value_only": true
                        }
                    },
                    "gss_tsig_enabled": {
                        "action": "inherit",
                        "display": {
                            "name": "displaynamegss_tsig_enabled"
                        },
                        "source": "sourcegss_tsig_enabled",
                        "value": true
                    },
                    "lame_ttl": {
                        "action": "inherit",
                        "display": {
                            "name": "displaynamelame_ttl"
                        },
                        "source": "sourcelame_ttl",
                        "value": 45
                    },
                    "match_recursive_only": {
                        "action": "inherit",
                        "display": {
                            "name": "displaynamematch_recursive_only"
                        },
                        "source": "sourcematch_recursive_only",
                        "value": false
                    },
                    "max_cache_ttl": {
                        "action": "inherit",
                        "display": {
                            "name": "displaynamemax_cache_ttl"
                        },
                        "source": "sourcemax_cache_ttl",
                        "value": 13
                    },
                    "max_negative_ttl": {
                        "action": "inherit",
                        "display": {
                            "name": "displaynamemax_negative_ttl"
                        },
                        "source": "sourcemax_negative_ttl",
                        "value": 12
                    },
                    "max_udp_size": {
                        "action": "inherit",
                        "display": {
                            "name": "displaynamemax_udp_size"
                        },
                        "source": "sourcemax_udp_size",
                        "value": 11
                    },
                    "minimal_responses": {
                        "action": "inherit",
                        "display": {
                            "name": "displaynameminimal_responses"
                        },
                        "source": "sourceminimal_responses",
                        "value": true
                    },
                    "notify": {
                        "action": "inherit",
                        "display": {
                            "name": "displayname_notify"
                        },
                        "source": "source_notify",
                        "value": true
                    },
                    "query_acl": {
                        "action": "override",
                        "display": {
                            "name": "displaynamequery_acl"
                        },
                        "source": "sourcequery_acl",
                        "value": [
                            {
                                "access": "allow",
                                "acl": "aclvalue_query_acl",
                                "address": "89.160.20.128",
                                "element": "elementvaluequery_acl",
                                "tsig_key": {
                                    "algorithm": "hmac_sha256",
                                    "comment": "commentquery_acl",
                                    "key": "keyquery_acl",
                                    "name": "namequery_acl",
                                    "protocol": {
                                        "name": "protocolname_query_acl"
                                    },
                                    "secret": "secretquery_acl"
                                }
                            }
                        ]
                    },
                    "recursion_acl": {
                        "action": "override",
                        "display": {
                            "name": "displaynamerecursion_acl"
                        },
                        "source": "sourcerecursion_acl",
                        "value": [
                            {
                                "access": "deny",
                                "acl": "aclrecursion_acl",
                                "address": "89.160.20.128",
                                "element": "elementrecursion_acl",
                                "tsig_key": {
                                    "algorithm": "hmac_sha384",
                                    "comment": "commentrecursion_acl",
                                    "key": "keyrecursion_acl",
                                    "name": "namerecursion_acl",
                                    "protocol": {
                                        "name": "protocolnamerecursion_acl"
                                    },
                                    "secret": "secretrecursion_acl"
                                }
                            }
                        ]
                    },
                    "recursion_enabled": {
                        "action": "inherit",
                        "display": {
                            "name": "displaynamerecursion_enabled"
                        },
                        "source": "sourcerecursion_enabled",
                        "value": true
                    },
                    "synthesize": {
                        "address_records_from_https": {
                            "action": "inherit",
                            "display": {
                                "name": "displaynamesynthesize_address_records_from_https"
                            },
                            "name": "sourcesynthesize_address_records_from_https",
                            "value": true
                        }
                    },
                    "transfer_acl": {
                        "action": "inherit",
                        "display": {
                            "name": "displaynametransfer_acl"
                        },
                        "source": "sourcetransfer_acl",
                        "value": [
                            {
                                "access": "allow",
                                "acl": "acltransfer_acl",
                                "address": "216.160.83.56",
                                "element": "elementtransfer_acl",
                                "tsig_key": {
                                    "algorithm": "hmac_sha224",
                                    "comment": "commenttransfer_acl",
                                    "key": "keytransfer_acl",
                                    "name": "nametransfer_acl",
                                    "protocol": {
                                        "name": "protocolnametransfer_acl"
                                    },
                                    "secret": "secrettransfer_acl"
                                }
                            }
                        ]
                    },
                    "update_acl": {
                        "action": "override",
                        "display": {
                            "name": "displaynameupdate_acl"
                        },
                        "source": "sourceupdate_acl",
                        "value": [
                            {
                                "access": "allow",
                                "acl": "aclupdate_acl",
                                "address": "216.160.83.56",
                                "element": "elementupdate_acl",
                                "tsig_key": {
                                    "algorithm": "hmac_sha384",
                                    "comment": "commentupdate_acl",
                                    "key": "keyupdate_acl",
                                    "name": "nameupdate_acl",
                                    "protocol": {
                                        "name": "protocolnameupdate_acl"
                                    },
                                    "secret": "secretupdate_acl"
                                }
                            }
                        ]
                    },
                    "use_forwarders_for_subzones": {
                        "action": "override",
                        "display": {
                            "name": "displaynameuse_forwarders_for_subzones"
                        },
                        "source": "sourceuse_forwarders_for_subzones",
                        "value": false
                    },
                    "zone_authority": {
                        "default_ttl": {
                            "action": "override",
                            "display": {
                                "name": "displaynamezone_authority"
                            },
                            "source": "sourcezone_authority",
                            "value": 50
                        },
                        "expire": {
                            "action": "inherit",
                            "display": {
                                "name": "displaynameexpire"
                            },
                            "source": "sourceexpire",
                            "value": 70
                        },
                        "mname_block": {
                            "action": "inherit",
                            "display": {
                                "name": "displaynamemname_block"
                            },
                            "source": "sourcemname_block",
                            "value": {
                                "isdefault": true,
                                "protocol": {
                                    "mname": "protocolmnamemname_block"
                                }
                            }
                        },
                        "mname_block_value": "mnamevaluemname_block",
                        "negative_ttl": {
                            "action": "inherit",
                            "display": {
                                "name": "displaynamenegative_ttl"
                            },
                            "source": "sourcenegative_ttl",
                            "value": 90
                        },
                        "protocol_rname": {
                            "action": "inherit",
                            "display": {
                                "name": "displaynameprotocol_rname"
                            },
                            "source": "sourceprotocol_rname",
                            "value": "valueprotocol_rname"
                        },
                        "refresh": {
                            "action": "inherit",
                            "display": {
                                "name": "displayname_refresh"
                            },
                            "source": "source_refresh",
                            "value": 40
                        },
                        "retry": {
                            "action": "inherit",
                            "display": {
                                "name": "displayname_retry"
                            },
                            "source": "source_retry",
                            "value": 570
                        },
                        "rname": {
                            "action": "inherit",
                            "display": {
                                "name": "displayname_rname"
                            },
                            "source": "source_rname",
                            "value": "value_rname"
                        }
                    }
                }
            },
            "ip_spaces": [
                "testipspaces"
            ],
            "lame_ttl": 350,
            "match_clients_acl": [
                {
                    "access": "deny",
                    "address": "81.2.69.192",
                    "element": "elementmatch_clients_acl",
                    "tsig_key": {
                        "algorithm": "hmac_sha512",
                        "comment": "commentmatch_clients_acl",
                        "key": "keymatch_clients_acl",
                        "name": "namematch_clients_acl",
                        "protocol": {
                            "name": "protocolnamematch_clients_acl"
                        },
                        "secret": "secretmatch_clients_acl"
                    },
                    "value": "aclmatch_clients_acl"
                }
            ],
            "match_destinations_acl": [
                {
                    "access": "allow",
                    "address": "81.2.69.192",
                    "element": "elementmatch_destinations_acl",
                    "tsig_key": {
                        "algorithm": "hmac_sha384",
                        "comment": "commentmatch_destinations_acl",
                        "key": "keymatch_destinations_acl",
                        "name": "namematch_destinations_acl",
                        "protocol": {
                            "name": "protocolnamematch_destinations_acl"
                        },
                        "secret": "secretmatch_destinations_acl"
                    },
                    "value": "aclmatch_destinations_acl"
                }
            ],
            "match_recursive_only": true,
            "max_cache_ttl": 90,
            "max_negative_ttl": 500,
            "max_udp_size": 890,
            "minimal_responses": true,
            "name": "string",
            "notify": true,
            "query_acl": [
                {
                    "access": "accessquery_acl",
                    "address": "81.2.69.192",
                    "element": "elementquery_acl",
                    "tsig_key": {
                        "algorithm": "hmac_sha224",
                        "comment": "commentquery_acl",
                        "key": "keyquery_acl",
                        "name": "namequery_acl",
                        "protocol": {
                            "name": "protocolnamequery_acl"
                        },
                        "secret": "secretquery_acl"
                    },
                    "value": "aclquery_acl"
                }
            ],
            "recursion_acl": [
                {
                    "access": "allow",
                    "address": "81.2.69.192",
                    "element": "elementrecursion_acl",
                    "tsig_key": {
                        "algorithm": "hmac_sha1",
                        "comment": "commentrecursion_acl",
                        "key": "keyrecursion_acl",
                        "name": "namerecursion_acl",
                        "protocol": {
                            "name": "protocolnamerecursion_acl"
                        },
                        "secret": "secretrecursion_acl"
                    },
                    "value": "aclrecursion_acl"
                }
            ],
            "recursion_enabled": true,
            "synthesize": {
                "address_records_from_https": false
            },
            "tags": {
                "message": "Hello"
            },
            "transfer_acl": [
                {
                    "access": "allow",
                    "address": "216.160.83.56",
                    "element": "elementtransfer_acl",
                    "tsig_key": {
                        "algorithm": "hmac_sha224",
                        "comment": "commenttransfer_acl",
                        "key": "keytransfer_acl",
                        "name": "nametransfer_acl",
                        "protocol": {
                            "name": "protocolnametransfer_acl"
                        },
                        "secret": "secrettransfer_acl"
                    },
                    "value": "acltransfer_acl"
                }
            ],
            "update_acl": [
                {
                    "access": "allow",
                    "address": "216.160.83.56",
                    "element": "elementupdate_acl",
                    "tsig_key": {
                        "algorithm": "hmac_sha1",
                        "comment": "commentupdate_acl",
                        "key": "keyupdate_acl",
                        "name": "nameupdate_acl",
                        "protocol": {
                            "name": "protocolnameupdate_acl"
                        },
                        "secret": "secretupdate_acl"
                    },
                    "value": "aclupdate_acl"
                }
            ],
            "updated_at": "2022-07-15T06:55:25.978Z",
            "use_forwarders_for_subzones": true,
            "zone_authority": {
                "default_ttl": 20,
                "expire": 10,
                "mname": "mnamezone_authority",
                "negative_ttl": 30,
                "protocol": {
                    "mname": "protocolmnamezone_authority",
                    "rname": "protocolrnamezone_authority"
                },
                "refresh": 50,
                "retry": 100,
                "rname": "string",
                "use_default_mname": true
            }
        }
    },
    "input": {
        "type": "httpjson"
    },
    "related": {
        "hash": [
            "hmac_sha256",
            "hmac_sha384",
            "hmac_sha224",
            "hmac_sha512",
            "hmac_sha1"
        ],
        "ip": [
            "81.2.69.192",
            "67.43.156.0",
            "89.160.20.128",
            "216.160.83.56"
        ]
    },
    "tags": [
        "preserve_original_event",
        "preserve_duplicate_custom_fields",
        "forwarded",
        "infoblox_bloxone_ddi-dns_config"
    ]
}
Exported fields
Field Description Type
@timestamp Event timestamp. date
cloud.image.id Image ID for the cloud instance. keyword
data_stream.dataset Data stream dataset. constant_keyword
data_stream.namespace Data stream namespace. constant_keyword
data_stream.type Data stream type. constant_keyword
event.dataset Event dataset. constant_keyword
event.module Event module. constant_keyword
host.containerized If the host is a container. boolean
host.os.build OS build information. keyword
host.os.codename OS codename, if any. keyword
infoblox_bloxone_ddi.dns_config.add_edns.option_in.outgoing_query add_edns_option_in_outgoing_query adds client IP, MAC address and view name into outgoing recursive query. boolean
infoblox_bloxone_ddi.dns_config.comment Optional. Comment for view. keyword
infoblox_bloxone_ddi.dns_config.created_at The timestamp when the object has been created. date
infoblox_bloxone_ddi.dns_config.custom_root_ns.address IPv4 address. ip
infoblox_bloxone_ddi.dns_config.custom_root_ns.fqdn FQDN. keyword
infoblox_bloxone_ddi.dns_config.custom_root_ns.protocol.fqdn FQDN in punycode. keyword
infoblox_bloxone_ddi.dns_config.custom_root_ns_enabled Optional. true to use custom root nameservers instead of the default ones. boolean
infoblox_bloxone_ddi.dns_config.disabled Optional. true to disable object. A disabled object is effectively non-existent when generating configuration. boolean
infoblox_bloxone_ddi.dns_config.dnssec.enable_validation Optional. true to perform DNSSEC validation. boolean
infoblox_bloxone_ddi.dns_config.dnssec.enabled Optional. Master toggle for all DNSSEC processing. boolean
infoblox_bloxone_ddi.dns_config.dnssec.root_keys.algorithm Key algorithm. Algorithm values are as per standards. long
infoblox_bloxone_ddi.dns_config.dnssec.root_keys.protocol.zone Zone FQDN in punycode. keyword
infoblox_bloxone_ddi.dns_config.dnssec.root_keys.public DNSSEC key data. Non-empty, valid base64 string. keyword
infoblox_bloxone_ddi.dns_config.dnssec.root_keys.sep Optional. Secure Entry Point flag. boolean
infoblox_bloxone_ddi.dns_config.dnssec.root_keys.zone Zone FQDN. keyword
infoblox_bloxone_ddi.dns_config.dnssec.trust_anchors.algorithm Key algorithm. Algorithm values are as per standards. long
infoblox_bloxone_ddi.dns_config.dnssec.trust_anchors.protocol.zone Zone FQDN in punycode. keyword
infoblox_bloxone_ddi.dns_config.dnssec.trust_anchors.public_key DNSSEC key data. Non-empty, valid base64 string. keyword
infoblox_bloxone_ddi.dns_config.dnssec.trust_anchors.sep Optional. Secure Entry Point flag. boolean
infoblox_bloxone_ddi.dns_config.dnssec.trust_anchors.zone Zone FQDN. keyword
infoblox_bloxone_ddi.dns_config.dnssec.validate_expiry Optional. true to reject expired DNSSEC keys. boolean
infoblox_bloxone_ddi.dns_config.ecs.enabled Optional. true to enable EDNS client subnet for recursive queries. boolean
infoblox_bloxone_ddi.dns_config.ecs.forwarding Optional. true to enable ECS options in outbound queries. This functionality has additional overhead so it is disabled by default. boolean
infoblox_bloxone_ddi.dns_config.ecs.prefix_v4 Optional. Maximum scope length for v4 ECS. long
infoblox_bloxone_ddi.dns_config.ecs.prefix_v6 Optional. Maximum scope length for v6 ECS. long
infoblox_bloxone_ddi.dns_config.ecs.zones.access Access control for zone. keyword
infoblox_bloxone_ddi.dns_config.ecs.zones.fqdn Zone FQDN. keyword
infoblox_bloxone_ddi.dns_config.ecs.zones.protocol.fqdn Zone FQDN in punycode. keyword
infoblox_bloxone_ddi.dns_config.edns.udp.size Optional. edns_udp_size represents the edns UDP size. long
infoblox_bloxone_ddi.dns_config.forwarders.address Server IP address. ip
infoblox_bloxone_ddi.dns_config.forwarders.fqdn Server FQDN. keyword
infoblox_bloxone_ddi.dns_config.forwarders.protocol.fqdn Server FQDN in punycode. keyword
infoblox_bloxone_ddi.dns_config.forwarders_only Optional. true to only forward. boolean
infoblox_bloxone_ddi.dns_config.gss_tsig_enabled gss_tsig_enabled enables/disables GSS-TSIG signed dynamic updates. boolean
infoblox_bloxone_ddi.dns_config.id The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.add_edns.option_in.outgoing_query.action The inheritance setting for a field. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.add_edns.option_in.outgoing_query.display.name The human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.add_edns.option_in.outgoing_query.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.add_edns.option_in.outgoing_query.value The inherited value. boolean
infoblox_bloxone_ddi.dns_config.inheritance.sources.custom_root_ns.block.action Defaults to inherit. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.custom_root_ns.block.display.name Human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.custom_root_ns.block.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.custom_root_ns.block.value.address IPv4 address. ip
infoblox_bloxone_ddi.dns_config.inheritance.sources.custom_root_ns.block.value.fqdn Optional. Field config for custom_root_ns_enabled field. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.custom_root_ns.block.value.protocol.fqdn FQDN. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.custom_root_ns.block.value_enabled FQDN in punycode. boolean
infoblox_bloxone_ddi.dns_config.inheritance.sources.dnssec.validation.block.action Defaults to inherit. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.dnssec.validation.block.display.name Human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.dnssec.validation.block.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.dnssec.validation.block.value.enable Optional. Field config for dnssec_enable_validation field. boolean
infoblox_bloxone_ddi.dns_config.inheritance.sources.dnssec.validation.block.value.enabled Optional. Field config for dnssec_enabled field. boolean
infoblox_bloxone_ddi.dns_config.inheritance.sources.dnssec.validation.block.value.trust_anchors.algorithm Key algorithm. Algorithm values are as per standards. long
infoblox_bloxone_ddi.dns_config.inheritance.sources.dnssec.validation.block.value.trust_anchors.protocol.zone Zone FQDN in punycode. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.dnssec.validation.block.value.trust_anchors.public_key DNSSEC key data. Non-empty, valid base64 string. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.dnssec.validation.block.value.trust_anchors.sep Optional. Secure Entry Point flag. boolean
infoblox_bloxone_ddi.dns_config.inheritance.sources.dnssec.validation.block.value.trust_anchors.zone Zone FQDN. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.dnssec.validation.block.value.validate_expiry Optional. Field config for dnssec_validate_expiry field. boolean
infoblox_bloxone_ddi.dns_config.inheritance.sources.ecs.block.action Defaults to inherit. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.ecs.block.display.name Human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.ecs.block.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.ecs.block.value.enabled Optional. Field config for ecs_enabled field. boolean
infoblox_bloxone_ddi.dns_config.inheritance.sources.ecs.block.value.forwarding Optional. Field config for ecs_forwarding field. boolean
infoblox_bloxone_ddi.dns_config.inheritance.sources.ecs.block.value.prefix_v4 Optional. Field config for ecs_prefix_v4 field. long
infoblox_bloxone_ddi.dns_config.inheritance.sources.ecs.block.value.prefix_v6 Optional. Field config for ecs_prefix_v6 field. long
infoblox_bloxone_ddi.dns_config.inheritance.sources.ecs.block.value.zones.access Access control for zone. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.ecs.block.value.zones.fqdn Zone FQDN. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.ecs.block.value.zones.protocol.fqdn Zone FQDN in punycode. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.edns.udp.size.action The inheritance setting for a field. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.edns.udp.size.display.name The human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.edns.udp.size.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.edns.udp.size.value The inherited value. long
infoblox_bloxone_ddi.dns_config.inheritance.sources.forwarders.block.action Defaults to inherit. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.forwarders.block.display.name Human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.forwarders.block.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.forwarders.block.value.address Server IP address. ip
infoblox_bloxone_ddi.dns_config.inheritance.sources.forwarders.block.value.fqdn Server FQDN. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.forwarders.block.value.protocol.fqdn Server FQDN in punycode. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.forwarders.block.value_only Optional. Field config for forwarders_only field. boolean
infoblox_bloxone_ddi.dns_config.inheritance.sources.gss_tsig_enabled.action The inheritance setting for a field. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.gss_tsig_enabled.display.name The human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.gss_tsig_enabled.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.gss_tsig_enabled.value The inherited value. boolean
infoblox_bloxone_ddi.dns_config.inheritance.sources.lame_ttl.action The inheritance setting for a field. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.lame_ttl.display.name The human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.lame_ttl.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.lame_ttl.value The inherited value. long
infoblox_bloxone_ddi.dns_config.inheritance.sources.match_recursive_only.action The inheritance setting for a field. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.match_recursive_only.display.name The human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.match_recursive_only.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.match_recursive_only.value The inherited value. boolean
infoblox_bloxone_ddi.dns_config.inheritance.sources.max_cache_ttl.action The inheritance setting for a field. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.max_cache_ttl.display.name The human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.max_cache_ttl.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.max_cache_ttl.value The inherited value. long
infoblox_bloxone_ddi.dns_config.inheritance.sources.max_negative_ttl.action The inheritance setting for a field. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.max_negative_ttl.display.name The human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.max_negative_ttl.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.max_negative_ttl.value The inherited value. long
infoblox_bloxone_ddi.dns_config.inheritance.sources.max_udp_size.action The inheritance setting for a field. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.max_udp_size.display.name The human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.max_udp_size.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.max_udp_size.value The inherited value. long
infoblox_bloxone_ddi.dns_config.inheritance.sources.minimal_responses.action The inheritance setting for a field. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.minimal_responses.display.name The human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.minimal_responses.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.minimal_responses.value The inherited value. boolean
infoblox_bloxone_ddi.dns_config.inheritance.sources.notify.action The inheritance setting for a field. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.notify.display.name The human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.notify.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.notify.value The inherited value. boolean
infoblox_bloxone_ddi.dns_config.inheritance.sources.query_acl.action The inheritance setting for a field. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.query_acl.display.name The human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.query_acl.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.query_acl.value.access Access permission for element. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.query_acl.value.acl The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.query_acl.value.address Optional. Data for ip element. ip
infoblox_bloxone_ddi.dns_config.inheritance.sources.query_acl.value.element Type of element. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.query_acl.value.tsig_key.algorithm TSIG key algorithm. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.query_acl.value.tsig_key.comment Comment for TSIG key. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.query_acl.value.tsig_key.key The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.query_acl.value.tsig_key.name TSIG key name, FQDN. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.query_acl.value.tsig_key.protocol.name TSIG key name in punycode. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.query_acl.value.tsig_key.secret TSIG key secret, base64 string. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.recursion_acl.action The inheritance setting for a field. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.recursion_acl.display.name The human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.recursion_acl.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.recursion_acl.value.access Access permission for element. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.recursion_acl.value.acl The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.recursion_acl.value.address Optional. Data for ip element. ip
infoblox_bloxone_ddi.dns_config.inheritance.sources.recursion_acl.value.element Type of element. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.recursion_acl.value.tsig_key.algorithm TSIG key algorithm. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.recursion_acl.value.tsig_key.comment Comment for TSIG key. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.recursion_acl.value.tsig_key.key The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.recursion_acl.value.tsig_key.name TSIG key name, FQDN. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.recursion_acl.value.tsig_key.protocol.name TSIG key name in punycode. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.recursion_acl.value.tsig_key.secret TSIG key secret, base64 string. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.recursion_enabled.action The inheritance setting for a field. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.recursion_enabled.display.name The human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.recursion_enabled.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.recursion_enabled.value The inherited value. boolean
infoblox_bloxone_ddi.dns_config.inheritance.sources.synthesize.address_records_from_https.action The inheritance setting for a field. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.synthesize.address_records_from_https.display.name The human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.synthesize.address_records_from_https.name The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.synthesize.address_records_from_https.value The inherited value. boolean
infoblox_bloxone_ddi.dns_config.inheritance.sources.transfer_acl.action The inheritance setting for a field. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.transfer_acl.display.name The human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.transfer_acl.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.transfer_acl.value.access Access permission for element. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.transfer_acl.value.acl The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.transfer_acl.value.address Optional. Data for ip element. ip
infoblox_bloxone_ddi.dns_config.inheritance.sources.transfer_acl.value.element Type of element. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.transfer_acl.value.tsig_key.algorithm TSIG key algorithm. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.transfer_acl.value.tsig_key.comment Comment for TSIG key. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.transfer_acl.value.tsig_key.key The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.transfer_acl.value.tsig_key.name TSIG key name, FQDN. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.transfer_acl.value.tsig_key.protocol.name TSIG key name in punycode. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.transfer_acl.value.tsig_key.secret TSIG key secret, base64 string. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.update_acl.action The inheritance setting for a field. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.update_acl.display.name The human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.update_acl.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.update_acl.value.access Access permission for element. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.update_acl.value.acl The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.update_acl.value.address Optional. Data for ip element. ip
infoblox_bloxone_ddi.dns_config.inheritance.sources.update_acl.value.element Type of element. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.update_acl.value.tsig_key.algorithm TSIG key algorithm. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.update_acl.value.tsig_key.comment Comment for TSIG key. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.update_acl.value.tsig_key.key The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.update_acl.value.tsig_key.name TSIG key name, FQDN. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.update_acl.value.tsig_key.protocol.name TSIG key name in punycode. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.update_acl.value.tsig_key.secret TSIG key secret, base64 string. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.use_forwarders_for_subzones.action The inheritance setting for a field. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.use_forwarders_for_subzones.display.name The human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.use_forwarders_for_subzones.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.use_forwarders_for_subzones.value The inherited value. boolean
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.default_ttl.action The inheritance setting for a field. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.default_ttl.display.name The human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.default_ttl.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.default_ttl.value The inherited value. long
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.expire.action The inheritance setting for a field. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.expire.display.name The human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.expire.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.expire.value The inherited value. long
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.mname_block.action Defaults to inherit. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.mname_block.display.name Human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.mname_block.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.mname_block.value.isdefault Optional. Use default value for master name server. Defaults to true. boolean
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.mname_block.value.protocol.mname Optional. Master name server in punycode. Defaults to empty. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.mname_block_value Defaults to empty. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.negative_ttl.action The inheritance setting for a field. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.negative_ttl.display.name The human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.negative_ttl.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.negative_ttl.value The inherited value. long
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.protocol_rname.action The inheritance setting for a field. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.protocol_rname.display.name The human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.protocol_rname.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.protocol_rname.value The inherited value. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.refresh.action The inheritance setting for a field. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.refresh.display.name The human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.refresh.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.refresh.value The inherited value. long
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.retry.action The inheritance setting for a field. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.retry.display.name The human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.retry.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.retry.value The inherited value. long
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.rname.action The inheritance setting for a field. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.rname.display.name The human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.rname.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.inheritance.sources.zone_authority.rname.value The inherited value. keyword
infoblox_bloxone_ddi.dns_config.ip_spaces The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.lame_ttl Optional. Unused in the current on-prem DNS server implementation. long
infoblox_bloxone_ddi.dns_config.match_clients_acl.access Access permission for element. keyword
infoblox_bloxone_ddi.dns_config.match_clients_acl.address Optional. Data for ip element. ip
infoblox_bloxone_ddi.dns_config.match_clients_acl.element Type of element. keyword
infoblox_bloxone_ddi.dns_config.match_clients_acl.tsig_key.algorithm TSIG key algorithm. keyword
infoblox_bloxone_ddi.dns_config.match_clients_acl.tsig_key.comment Comment for TSIG key. keyword
infoblox_bloxone_ddi.dns_config.match_clients_acl.tsig_key.key The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.match_clients_acl.tsig_key.name TSIG key name, FQDN. keyword
infoblox_bloxone_ddi.dns_config.match_clients_acl.tsig_key.protocol.name TSIG key name in punycode. keyword
infoblox_bloxone_ddi.dns_config.match_clients_acl.tsig_key.secret TSIG key secret, base64 string. keyword
infoblox_bloxone_ddi.dns_config.match_clients_acl.value The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.match_destinations_acl.access Access permission for element. keyword
infoblox_bloxone_ddi.dns_config.match_destinations_acl.address Optional. Data for ip element. ip
infoblox_bloxone_ddi.dns_config.match_destinations_acl.element Type of element. keyword
infoblox_bloxone_ddi.dns_config.match_destinations_acl.tsig_key.algorithm TSIG key algorithm. keyword
infoblox_bloxone_ddi.dns_config.match_destinations_acl.tsig_key.comment Comment for TSIG key. keyword
infoblox_bloxone_ddi.dns_config.match_destinations_acl.tsig_key.key The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.match_destinations_acl.tsig_key.name TSIG key name, FQDN. keyword
infoblox_bloxone_ddi.dns_config.match_destinations_acl.tsig_key.protocol.name TSIG key name in punycode. keyword
infoblox_bloxone_ddi.dns_config.match_destinations_acl.tsig_key.secret TSIG key secret, base64 string. keyword
infoblox_bloxone_ddi.dns_config.match_destinations_acl.value The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.match_recursive_only Optional. If true only recursive queries from matching clients access the view. boolean
infoblox_bloxone_ddi.dns_config.max_cache_ttl Optional. Seconds to cache positive responses. long
infoblox_bloxone_ddi.dns_config.max_negative_ttl Optional. Seconds to cache negative responses. long
infoblox_bloxone_ddi.dns_config.max_udp_size Optional. max_udp_size represents maximum UDP payload size. long
infoblox_bloxone_ddi.dns_config.minimal_responses Optional. When enabled, the DNS server will only add records to the authority and additional data sections when they are required. boolean
infoblox_bloxone_ddi.dns_config.name Name of view. keyword
infoblox_bloxone_ddi.dns_config.notify notify all external secondary DNS servers. boolean
infoblox_bloxone_ddi.dns_config.query_acl.access Access permission for element. keyword
infoblox_bloxone_ddi.dns_config.query_acl.address Optional. Data for ip element. ip
infoblox_bloxone_ddi.dns_config.query_acl.element Type of element. keyword
infoblox_bloxone_ddi.dns_config.query_acl.tsig_key.algorithm TSIG key algorithm. keyword
infoblox_bloxone_ddi.dns_config.query_acl.tsig_key.comment Comment for TSIG key. keyword
infoblox_bloxone_ddi.dns_config.query_acl.tsig_key.key The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.query_acl.tsig_key.name TSIG key name, FQDN. keyword
infoblox_bloxone_ddi.dns_config.query_acl.tsig_key.protocol.name TSIG key name in punycode. keyword
infoblox_bloxone_ddi.dns_config.query_acl.tsig_key.secret TSIG key secret, base64 string. keyword
infoblox_bloxone_ddi.dns_config.query_acl.value The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.recursion_acl.access Access permission for element. keyword
infoblox_bloxone_ddi.dns_config.recursion_acl.address Optional. Data for ip element. ip
infoblox_bloxone_ddi.dns_config.recursion_acl.element Type of element. keyword
infoblox_bloxone_ddi.dns_config.recursion_acl.tsig_key.algorithm TSIG key algorithm. keyword
infoblox_bloxone_ddi.dns_config.recursion_acl.tsig_key.comment Comment for TSIG key. keyword
infoblox_bloxone_ddi.dns_config.recursion_acl.tsig_key.key The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.recursion_acl.tsig_key.name TSIG key name, FQDN. keyword
infoblox_bloxone_ddi.dns_config.recursion_acl.tsig_key.protocol.name TSIG key name in punycode. keyword
infoblox_bloxone_ddi.dns_config.recursion_acl.tsig_key.secret TSIG key secret, base64 string. keyword
infoblox_bloxone_ddi.dns_config.recursion_acl.value The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.recursion_enabled Optional. true to allow recursive DNS queries. boolean
infoblox_bloxone_ddi.dns_config.synthesize.address_records_from_https synthesize_address_records_from_https enables/disables creation of A/AAAA records from HTTPS RR. boolean
infoblox_bloxone_ddi.dns_config.tags Tagging specifics. flattened
infoblox_bloxone_ddi.dns_config.transfer_acl.access Access permission for element. keyword
infoblox_bloxone_ddi.dns_config.transfer_acl.address Optional. Data for ip element. ip
infoblox_bloxone_ddi.dns_config.transfer_acl.element Type of element. keyword
infoblox_bloxone_ddi.dns_config.transfer_acl.tsig_key.algorithm TSIG key algorithm. keyword
infoblox_bloxone_ddi.dns_config.transfer_acl.tsig_key.comment Comment for TSIG key. keyword
infoblox_bloxone_ddi.dns_config.transfer_acl.tsig_key.key The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.transfer_acl.tsig_key.name TSIG key name, FQDN. keyword
infoblox_bloxone_ddi.dns_config.transfer_acl.tsig_key.protocol.name TSIG key name in punycode. keyword
infoblox_bloxone_ddi.dns_config.transfer_acl.tsig_key.secret TSIG key secret, base64 string. keyword
infoblox_bloxone_ddi.dns_config.transfer_acl.value The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.update_acl.access Access permission for element. keyword
infoblox_bloxone_ddi.dns_config.update_acl.address Optional. Data for ip element. ip
infoblox_bloxone_ddi.dns_config.update_acl.element Type of element. keyword
infoblox_bloxone_ddi.dns_config.update_acl.tsig_key.algorithm TSIG key algorithm. keyword
infoblox_bloxone_ddi.dns_config.update_acl.tsig_key.comment Comment for TSIG key. keyword
infoblox_bloxone_ddi.dns_config.update_acl.tsig_key.key The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.update_acl.tsig_key.name TSIG key name, FQDN. keyword
infoblox_bloxone_ddi.dns_config.update_acl.tsig_key.protocol.name TSIG key name in punycode. keyword
infoblox_bloxone_ddi.dns_config.update_acl.tsig_key.secret TSIG key secret, base64 string. keyword
infoblox_bloxone_ddi.dns_config.update_acl.value The resource identifier. keyword
infoblox_bloxone_ddi.dns_config.updated_at The timestamp when the object has been updated. Equals to created_at if not updated after creation. date
infoblox_bloxone_ddi.dns_config.use_forwarders_for_subzones Optional. Use default forwarders to resolve queries for subzones. boolean
infoblox_bloxone_ddi.dns_config.zone_authority.default_ttl Optional. ZoneAuthority default ttl for resource records in zone (value in seconds). long
infoblox_bloxone_ddi.dns_config.zone_authority.expire Optional. ZoneAuthority expire time in seconds. Defaults to 2419200. long
infoblox_bloxone_ddi.dns_config.zone_authority.mname Optional. ZoneAuthority master name server (partially qualified domain name) Defaults to empty. keyword
infoblox_bloxone_ddi.dns_config.zone_authority.negative_ttl Optional. ZoneAuthority negative caching (minimum) ttl in seconds. long
infoblox_bloxone_ddi.dns_config.zone_authority.protocol.mname Optional. ZoneAuthority master name server in punycode. Defaults to empty. keyword
infoblox_bloxone_ddi.dns_config.zone_authority.protocol.rname Optional. A domain name which specifies the mailbox of the person responsible for this zone. Defaults to empty. keyword
infoblox_bloxone_ddi.dns_config.zone_authority.refresh Optional. ZoneAuthority refresh. Defaults to 10800. long
infoblox_bloxone_ddi.dns_config.zone_authority.retry Optional. ZoneAuthority retry. Defaults to 3600. long
infoblox_bloxone_ddi.dns_config.zone_authority.rname Optional. ZoneAuthority rname. Defaults to empty. keyword
infoblox_bloxone_ddi.dns_config.zone_authority.use_default_mname Optional. Use default value for master name server. Defaults to true. boolean
input.type Input type keyword
log.offset Log offset long

This is the dns_data dataset.

Example
JSON
{
    "@timestamp": "2022-07-20T09:59:59.184Z",
    "agent": {
        "ephemeral_id": "f542e2ed-0e74-450a-bcad-6922fda55162",
        "id": "d3125a76-9105-4f3c-8135-6cee1233deff",
        "name": "elastic-agent-22096",
        "type": "filebeat",
        "version": "8.19.4"
    },
    "data_stream": {
        "dataset": "infoblox_bloxone_ddi.dns_data",
        "namespace": "47994",
        "type": "logs"
    },
    "dns": {
        "answers": [
            {
                "data": "DNS RData",
                "ttl": 0,
                "type": "DNS Data Type"
            }
        ],
        "question": {
            "name": "DNS Absolute Name",
            "registered_domain": "DNS Absolute Zone Name",
            "subdomain": "DNS Name in Zone",
            "type": "DNS Data Type"
        }
    },
    "ecs": {
        "version": "8.11.0"
    },
    "elastic_agent": {
        "id": "d3125a76-9105-4f3c-8135-6cee1233deff",
        "snapshot": false,
        "version": "8.19.4"
    },
    "event": {
        "agent_id_status": "verified",
        "category": [
            "network"
        ],
        "created": "2022-07-20T09:59:59.184Z",
        "dataset": "infoblox_bloxone_ddi.dns_data",
        "id": "ghr123ghf",
        "ingested": "2025-12-16T13:26:53Z",
        "kind": "event",
        "original": "{\"absolute_name_spec\":\"DNS Data Absolute Name\",\"absolute_zone_name\":\"DNS Data Absolute Zone Name\",\"comment\":\"DNS Data Comment\",\"created_at\":\"2022-07-20T09:59:59.184Z\",\"delegation\":\"DNS Data Delegation\",\"disabled\":true,\"dns_absolute_name_spec\":\"DNS Absolute Name\",\"dns_absolute_zone_name\":\"DNS Absolute Zone Name\",\"dns_name_in_zone\":\"DNS Name in Zone\",\"dns_rdata\":\"DNS RData\",\"id\":\"ghr123ghf\",\"inheritance_sources\":{\"ttl\":{\"action\":\"DNS Data Action\",\"display_name\":\"DNS Display Name\",\"source\":\"DNS Data Source\",\"value\":10}},\"name_in_zone\":\"DNS Data Name in zone\",\"options\":{\"address\":\"67.43.156.0\",\"check_rmz\":true,\"create_ptr\":false},\"rdata\":{\"address\":\"81.2.69.192\",\"cname\":\"DNS Data Canonical Name\",\"dhcid\":\"122zbczba12\",\"dname\":\"DNS Data dname\",\"exchange\":\"DNS Data Exchange\",\"expire\":23131,\"flags\":\"DNS Data Flags\",\"length_kind\":8,\"mname\":\"DNS Data mname\",\"negative_ttl\":213342,\"order\":123124,\"port\":80,\"preference\":12345363467,\"priority\":44,\"refresh\":10800,\"regexp\":\"none\",\"replacement\":\"DNS Data Replacement\",\"retry\":3600,\"rname\":\"DNS Data rname\",\"serial\":12314114,\"services\":\"DNS Data Test Services\",\"tag\":\"issue\",\"target\":\"DNS Data Target\",\"text\":\"DNS Data text field\",\"type\":\"32BIT\",\"value\":\"DNS Data Value\",\"weight\":0},\"source\":[\"STATIC\"],\"tags\":{\"message\":\"Hello\"},\"ttl\":0,\"type\":\"DNS Data Type\",\"updated_at\":\"2022-07-20T09:59:59.184Z\",\"view\":\"DNS Data View\",\"view_name\":\"DNS Data View Name\",\"zone\":\"DNS Data Zone\"}",
        "type": [
            "protocol"
        ]
    },
    "infoblox_bloxone_ddi": {
        "dns_data": {
            "absolute": {
                "name": {
                    "spec": "DNS Absolute Name"
                },
                "zone": {
                    "name": "DNS Absolute Zone Name"
                }
            },
            "absolute_name": {
                "spec": "DNS Data Absolute Name"
            },
            "absolute_zone": {
                "name": "DNS Data Absolute Zone Name"
            },
            "comment": "DNS Data Comment",
            "created_at": "2022-07-20T09:59:59.184Z",
            "delegation": "DNS Data Delegation",
            "disabled": true,
            "id": "ghr123ghf",
            "inheritance": {
                "sources": {
                    "ttl": {
                        "action": "DNS Data Action",
                        "display": {
                            "name": "DNS Display Name"
                        },
                        "source": "DNS Data Source",
                        "value": 10
                    }
                }
            },
            "name_in": {
                "zone": "DNS Name in Zone"
            },
            "name_in_zone": "DNS Data Name in zone",
            "options": {
                "address": "67.43.156.0",
                "check_rmz": true,
                "create_ptr": false
            },
            "rdata": {
                "address": "81.2.69.192",
                "cname": "DNS Data Canonical Name",
                "dhcid": "122zbczba12",
                "dname": "DNS Data dname",
                "exchange": "DNS Data Exchange",
                "expire": 23131,
                "flags": "DNS Data Flags",
                "length_kind": 8,
                "mname": "DNS Data mname",
                "negative_ttl": 213342,
                "order": 123124,
                "port": 80,
                "preference": 12345363467,
                "priority": 44,
                "refresh": 10800,
                "regexp": "none",
                "replacement": "DNS Data Replacement",
                "retry": 3600,
                "rname": "DNS Data rname",
                "serial": 12314114,
                "services": "DNS Data Test Services",
                "tag": "issue",
                "target": "DNS Data Target",
                "text": "DNS Data text field",
                "type": "32BIT",
                "value": "DNS Data Value",
                "weight": 0
            },
            "rdata_value": "DNS RData",
            "source": [
                "STATIC"
            ],
            "tags": {
                "message": "Hello"
            },
            "ttl": 0,
            "type": "DNS Data Type",
            "updated_at": "2022-07-20T09:59:59.184Z",
            "view": "DNS Data View",
            "view_name": "DNS Data View Name",
            "zone": "DNS Data Zone"
        }
    },
    "input": {
        "type": "httpjson"
    },
    "related": {
        "ip": [
            "67.43.156.0",
            "81.2.69.192"
        ]
    },
    "tags": [
        "preserve_original_event",
        "preserve_duplicate_custom_fields",
        "forwarded",
        "bloxone_ddi-dns_data"
    ]
}
Exported fields
Field Description Type
@timestamp Event timestamp. date
cloud.image.id Image ID for the cloud instance. keyword
data_stream.dataset Data stream dataset. constant_keyword
data_stream.namespace Data stream namespace. constant_keyword
data_stream.type Data stream type. constant_keyword
event.dataset Event dataset. constant_keyword
event.module Event module. constant_keyword
host.containerized If the host is a container. boolean
host.os.build OS build information. keyword
host.os.codename OS codename, if any. keyword
infoblox_bloxone_ddi.dns_data.absolute.name.spec The DNS protocol textual representation of absolute_name_spec. keyword
infoblox_bloxone_ddi.dns_data.absolute.zone.name The DNS protocol textual representation of the absolute domain name of the zone where this record belongs. keyword
infoblox_bloxone_ddi.dns_data.absolute_name.spec Synthetic field, used to determine zone and/or name_in_zone field for records. keyword
infoblox_bloxone_ddi.dns_data.absolute_zone.name The absolute domain name of the zone where this record belongs. keyword
infoblox_bloxone_ddi.dns_data.comment The description for the DNS resource record. May contain 0 to 1024 characters. Can include UTF-8. keyword
infoblox_bloxone_ddi.dns_data.created_at The timestamp when the object has been created. date
infoblox_bloxone_ddi.dns_data.delegation The resource identifier. keyword
infoblox_bloxone_ddi.dns_data.disabled Indicates if the DNS resource record is disabled. A disabled object is effectively non-existent when generating configuration. boolean
infoblox_bloxone_ddi.dns_data.id The resource identifier. keyword
infoblox_bloxone_ddi.dns_data.inheritance.sources.ttl.action The inheritance setting for a field. keyword
infoblox_bloxone_ddi.dns_data.inheritance.sources.ttl.display.name The human-readable display name for the object referred to by source. keyword
infoblox_bloxone_ddi.dns_data.inheritance.sources.ttl.source The resource identifier. keyword
infoblox_bloxone_ddi.dns_data.inheritance.sources.ttl.value The inherited value. long
infoblox_bloxone_ddi.dns_data.name_in.zone The DNS protocol textual representation of the relative owner name for the DNS zone. keyword
infoblox_bloxone_ddi.dns_data.name_in_zone The relative owner name to the zone origin. Must be specified for creating the DNS resource record and is read only for other operations. keyword
infoblox_bloxone_ddi.dns_data.options.address For GET operation it contains the IPv4 or IPv6 address represented by the PTR record and for POST and PATCH operations it can be used to create/update a PTR record based on the IP address it represents. In this case, in addition to the address in the options field, need to specify the view field. ip
infoblox_bloxone_ddi.dns_data.options.check_rmz A boolean flag which can be set to true for POST operation to check the existence of reverse zone for creating the corresponding PTR record. Only applicable if the create_ptr option is set to true. boolean
infoblox_bloxone_ddi.dns_data.options.create_ptr A boolean flag which can be set to true for POST operation to automatically create the corresponding PTR record. boolean
infoblox_bloxone_ddi.dns_data.provider_metadata external DNS provider metadata. flattened
infoblox_bloxone_ddi.dns_data.rdata.address The IPv4/IPv6 address of the host. ip
infoblox_bloxone_ddi.dns_data.rdata.cname A domain name which specifies the canonical or primary name for the owner. The owner name is an alias. Can be empty. keyword
infoblox_bloxone_ddi.dns_data.rdata.dhcid The Base64 encoded string which contains DHCP client information. keyword
infoblox_bloxone_ddi.dns_data.rdata.dname A domain-name which specifies a host which should be authoritative for the specified class and domain. Can be absolute or relative domain name and include UTF-8. keyword
infoblox_bloxone_ddi.dns_data.rdata.exchange A domain name which specifies a host willing to act as a mail exchange for the owner name. keyword
infoblox_bloxone_ddi.dns_data.rdata.expire The time interval in seconds after which zone data will expire and secondary server stops answering requests for the zone. long
infoblox_bloxone_ddi.dns_data.rdata.flags An unsigned 8-bit integer which specifies the CAA record flags. RFC 6844 defines one (highest) bit in flag octet, remaining bits are deferred for future use. This bit is referenced as Critical. When the bit is set (flag value == 128), issuers must not issue certificates in case CAA records contain unknown property tags. keyword
infoblox_bloxone_ddi.dns_data.rdata.length_kind A string indicating the size in bits of a sub-subfield that is prepended to the value and encodes the length of the value. long
infoblox_bloxone_ddi.dns_data.rdata.mname The domain name for the master server for the zone. Can be absolute or relative domain name. keyword
infoblox_bloxone_ddi.dns_data.rdata.negative_ttl The time interval in seconds for which name servers can cache negative responses for zone. long
infoblox_bloxone_ddi.dns_data.rdata.order A 16-bit unsigned integer specifying the order in which the NAPTR records must be processed. Low numbers are processed before high numbers, and once a NAPTR is found whose rule “matches” the target, the client must not consider any NAPTRs with a higher value for order (except as noted below for the “flags” field. The range of the value is 0 to 65535. long
infoblox_bloxone_ddi.dns_data.rdata.port An unsigned 16-bit integer which specifies the port on this target host of this service. The range of the value is 0 to 65535. This is often as specified in Assigned Numbers but need not be. long
infoblox_bloxone_ddi.dns_data.rdata.preference An unsigned 16-bit integer which specifies the preference given to this RR among others at the same owner. Lower values are preferred. The range of the value is 0 to 65535. long
infoblox_bloxone_ddi.dns_data.rdata.priority An unsigned 16-bit integer which specifies the priority of this target host. The range of the value is 0 to 65535. A client must attempt to contact the target host with the lowest-numbered priority it can reach. Target hosts with the same priority should be tried in an order defined by the weight field. long
infoblox_bloxone_ddi.dns_data.rdata.refresh The time interval in seconds that specifies how often secondary servers need to send a message to the primary server for a zone to check that their data is current, and retrieve fresh data if it is not. long
infoblox_bloxone_ddi.dns_data.rdata.regexp A string containing a substitution expression that is applied to the original string held by the client in order to construct the next domain name to lookup. keyword
infoblox_bloxone_ddi.dns_data.rdata.replacement The next name to query for NAPTR, SRV, or address records depending on the value of the flags field. This can be an absolute or relative domain name. Can be empty. keyword
infoblox_bloxone_ddi.dns_data.rdata.retry The time interval in seconds for which the secondary server will wait before attempting to recontact the primary server after a connection failure occurs. long
infoblox_bloxone_ddi.dns_data.rdata.rname The domain name which specifies the mailbox of the person responsible for this zone. keyword
infoblox_bloxone_ddi.dns_data.rdata.serial An unsigned 32-bit integer that specifies the serial number of the zone. Used to indicate that zone data was updated, so the secondary name server can initiate zone transfer. The range of the value is 0 to 4294967295. long
infoblox_bloxone_ddi.dns_data.rdata.services Specifies the service(s) available down this rewrite path. It may also specify the particular protocol that is used to talk with a service. A protocol must be specified if the flags field states that the NAPTR is terminal. If a protocol is specified, but the flags field does not state that the NAPTR is terminal, the next lookup must be for a NAPTR. The client may choose not to perform the next lookup if the protocol is unknown, but that behavior must not be relied upon. keyword
infoblox_bloxone_ddi.dns_data.rdata.tag The CAA record property tag string which indicates the type of CAA record. keyword
infoblox_bloxone_ddi.dns_data.rdata.target The target domain name to which the zone will be mapped. Can be empty. keyword
infoblox_bloxone_ddi.dns_data.rdata.text The semantics of the text depends on the domain where it is found. keyword
infoblox_bloxone_ddi.dns_data.rdata.type Type of TXT (Text) record. keyword
infoblox_bloxone_ddi.dns_data.rdata.value A string which contains the CAA record property value. keyword
infoblox_bloxone_ddi.dns_data.rdata.weight An unsigned 16-bit integer which specifies a relative weight for entries with the same priority. The range of the value is 0 to 65535. Larger weights should be given a proportionately higher probability of being selected. Domain administrators should use weight 0 when there isn’t any server selection to do, to make the RR easier to read for humans (less noisy). In the presence of records containing weights greater than 0, records with weight 0 should have a very small chance of being selected. long
infoblox_bloxone_ddi.dns_data.rdata_value The DNS protocol textual representation of the DNS resource record data. keyword
infoblox_bloxone_ddi.dns_data.source The DNS resource record type-specific non-protocol source. The source is a combination of indicators, each tracking how the DNS resource record appeared in system. keyword
infoblox_bloxone_ddi.dns_data.tags The tags for the DNS resource record in JSON format. flattened
infoblox_bloxone_ddi.dns_data.ttl The record time to live value in seconds. The range of this value is 0 to 2147483647. Defaults to TTL value from the SOA record of the zone. long
infoblox_bloxone_ddi.dns_data.type The DNS resource record type specified in the textual mnemonic format or in the “TYPEnnn” format where “nnn” indicates the numeric type value. keyword
infoblox_bloxone_ddi.dns_data.updated_at The timestamp when the object has been updated. Equals to created_at if not updated after creation. date
infoblox_bloxone_ddi.dns_data.view The resource identifier. keyword
infoblox_bloxone_ddi.dns_data.view_name The display name of the DNS view that contains the parent zone of the DNS resource record. keyword
infoblox_bloxone_ddi.dns_data.zone The resource identifier. keyword
input.type Input type keyword
log.offset Log offset long

This integration includes one or more Kibana dashboards that visualizes the data collected by the integration. The screenshots below illustrate how the ingested data is displayed.

Infoblox BloxOne DDI dashboard screenshot
Changelog
Version Details Minimum Kibana version
1.26.0 Enhancement (View pull request)
Update Elastic Managed integration documentation to the current wording and docs links.
9.1.4
9.0.7
8.19.4
1.25.0 Enhancement (View pull request)
Enable request trace log removal.
9.1.4
9.0.7
8.19.4
1.24.0 Enhancement (View pull request)
Add tags to ingest pipeline processors.
9.1.4
9.0.7
8.19.4
1.23.1 Enhancement (View pull request)
Set agentless deployment mode release field to ga.
9.1.4
9.0.7
8.19.4
1.23.0 Enhancement (View pull request)
Enable Agentless deployment.
9.1.4
9.0.7
8.19.4
1.22.0 Enhancement (View pull request)
Prevent updating fleet health status to degraded when pagination completes.
9.1.4
9.0.7
8.19.4
1.21.0 Enhancement (View pull request)
Update Kibana constraint to support 9.0.0.
9.0.0
8.13.0
1.20.1 Bug fix (View pull request)
Updated SSL description in package manifest.yml to be uniform and to include links to documentation.
8.13.0
1.20.0 Enhancement (View pull request)
Do not remove event.original in main ingest pipeline.
8.13.0
1.19.0 Enhancement (View pull request)
Add "preserve_original_event" tag to documents with event.kind set to "pipeline_error".
8.13.0
1.18.1 Bug fix (View pull request)
Fix string literals in painless scripts.
8.13.0
1.18.0 Enhancement (View pull request)
Update the kibana constraint to ^8.13.0. Modified the field definitions to remove ECS fields made redundant by the ecs@mappings component template.
8.13.0
1.17.0 Enhancement (View pull request)
Improve handling of empty responses.
8.12.0
1.16.0 Enhancement (View pull request)
Set sensitive values as secret.
8.12.0
1.15.0 Enhancement (View pull request)
Map DNS fields to ECS.
8.7.1
1.14.1 Enhancement (View pull request)
Changed owners
8.7.1
1.14.0 Enhancement (View pull request)
Limit request tracer log count to five.
8.7.1
1.13.0 Enhancement (View pull request)
ECS version updated to 8.11.0.
8.7.1
1.12.0 Enhancement (View pull request)
Improve 'event.original' check to avoid errors if set.
8.7.1
1.11.3 Bug fix (View pull request)
Fix documentation for initial interval configuration.
8.7.1
1.11.2 Bug fix (View pull request)
Fix handling of options fields.
8.7.1
1.11.1 Bug fix (View pull request)
Correct conversion of IP addresses on empty arrays, and drop emtpy messages
8.7.1
1.11.0 Enhancement (View pull request)
ECS version updated to 8.10.0.
8.7.1
1.10.0 Enhancement (View pull request)
The format_version in the package manifest changed from 2.11.0 to 3.0.0. Removed dotted YAML keys from package manifest. Added 'owner.type: elastic' to package manifest.
8.7.1
1.9.0 Enhancement (View pull request)
Add tags.yml file so that integration's dashboards and saved searches are tagged with "Security Solution" and displayed in the Security Solution UI.
8.7.1
1.8.0 Enhancement (View pull request)
Update package to ECS 8.9.0.
8.7.1
1.7.0 Enhancement (View pull request)
Document duration units.
8.7.1
1.6.0 Enhancement (View pull request)
Convert visualizations to lens.
8.7.1
1.5.0 Enhancement (View pull request)
Ensure event.kind is correctly set for pipeline errors.
8.7.1
1.4.0 Enhancement (View pull request)
Update package to ECS 8.8.0.
8.7.1
1.3.0 Enhancement (View pull request)
Update package-spec version to 2.7.0.
8.7.1
1.2.0 Enhancement (View pull request)
Add a new flag to enable request tracing
8.7.1
1.1.0 Enhancement (View pull request)
Update package to ECS 8.7.0.
8.0.0
7.17.0
1.0.0 Enhancement (View pull request)
Release Infoblox BloxOne DDI as GA.
8.0.0
7.17.0
0.3.1 Enhancement (View pull request)
Added categories and/or subcategories.
8.0.0
7.17.0
0.3.0 Enhancement (View pull request)
Update package to ECS 8.6.0.
8.0.0
7.17.0
0.2.2 Bug fix (View pull request)
Remove duplicate fields.

Bug fix (View pull request)
Fix markdown syntax in proxy_url description.
8.0.0
7.17.0
0.2.1 Enhancement (View pull request)
Added Filter instead of KQL in visualizations and Update the pagination termination condition.
8.0.0
7.17.0
0.2.0 Enhancement (View pull request)
Update package to ECS 8.5.0.
8.0.0
7.17.0
0.1.1 Bug fix (View pull request)
Fix documentation build error.
8.0.0
7.17.0
0.1.0 Enhancement (View pull request)
Initial Release.
8.0.0
7.17.0