dns-logs

This project demonstrates how to ingest, parse, and analyze DNS logs using Splunk Enterprise. By leveraging Zeek-style JSON DNS logs, we perform meaningful security and traffic analysis using Splunk Search Processing Language (SPL).

See what your devices talk to. A local DNS resolver that records which domains every device on your network contacts, classifies them, and flags when one starts talking somewhere new. Zero dependencies, nothing uploaded.