Document Details
Dns Ama Fields
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Detected Bias Types
windows_first
missing_linux_example
windows_tools
Summary
The documentation is heavily focused on Windows DNS servers and the Windows DNS Events via AMA connector. All examples, field mappings, and instructions reference Windows-specific tools and patterns, with no mention of Linux or cross-platform DNS sources. The normalization schema is described only in terms of Windows DNS fields, and there are no Linux equivalents or guidance for Linux-based DNS servers.
Recommendations
- Add sections describing how to collect and normalize DNS logs from Linux-based DNS servers (e.g., BIND, Unbound, dnsmasq) using Microsoft Sentinel.
- Provide equivalent field mapping tables for popular Linux DNS server log formats.
- Include examples and connector instructions for Linux environments, ensuring parity in filtering and normalization capabilities.
- Clarify in the introduction whether Linux DNS servers are supported or provide links to relevant Linux documentation if available.
Create Pull Request
Scan History
| Date | Scan | Status | Result |
|---|---|---|---|
| 2026-01-14 00:00 | #250 | in_progress |
 Clean
|
| 2026-01-13 00:00 | #246 | completed |
Biased
|
| 2026-01-11 00:00 | #240 | completed |
Biased
|
| 2026-01-10 00:00 | #237 | completed |
Biased
|
| 2026-01-09 00:34 | #234 | completed |
Biased
|
| 2026-01-08 00:53 | #231 | completed |
Biased
|
| 2026-01-06 18:15 | #225 | cancelled |
Clean
|
| 2025-08-17 00:01 | #83 | cancelled |
Clean
|
| 2025-07-13 21:37 | #48 | completed |
Clean
|
| 2025-07-12 23:44 | #41 | cancelled |
Biased
|