Collectors are responsible for gathering DNS data from different sources. They act as the input layer of your DNS monitoring pipeline.
Collector
Status
Description
AF_PACKET Sniffer
Production ready
Live packet capture using AF_PACKET sockets
XDP Sniffer
Experimental
High-performance live packet capture using XDP (eXpress Data Path)
Network Streaming Collectors
Collector
Status
Description
DNStap Server
Production ready
Integration with DNS servers supporting DNStap (BIND, Unbound, PowerDNS) Full support
PowerDNS
Production ready
Direct integration with PowerDNS authoritative and recursive servers Full support
TZSP
Beta support
TZSP network protocol
Collector
Status
Description
File Ingestor
Production ready
Processes stored network captures (PCAP or DNStap files)
Tail
Production ready
Monitors and parses plain text log files
Collector
Status
Description
DNS Message
Production ready
Filters and matches specific DNS messages
HTTP Webhook
Experimental
Adds custom data using HTTP webhooks
Loggers handle the output and processing of collected DNS data. They provide various formats and destinations for your DNS logs.
Logger
Status
Description
Console
Production ready
Outputs logs to standard output (Text, JSON, Binary)
File
Production ready
Saves logs to local files (Plain text, Binary)
Logger
Status
Description
DNStap Client
Production ready
Forwards logs in DNStap format over TCP/Unix sockets
TCP
Production ready
Streams logs over TCP connections
Syslog
Production ready
Sends logs via syslog protocol (RFC3164/RFC5424)
Logger
Status
Description
Prometheus
Production ready
Exposes DNS metrics for Prometheus scraping
Statsd
Beta support
Sends metrics in StatsD format
Rest API
Beta support
Provides REST endpoints for log searching
Logger
Status
Description
InfluxDB
Beta support
Stores DNS metrics and logs in InfluxDB v1.x/v2.x
ClickHouse
Beta support
High-performance analytics database
Log Aggregation Platforms
Logger
Status
Description
Fluentd
Beta support
Forwards logs to Fluentd collectors
Loki Client
Production ready
Sends logs to Grafana Loki
ElasticSearch
Production ready
Indexes logs in Elasticsearch
Scalyr
Beta support
Sends logs to DataSet/Scalyr platform
Message Queues & Streaming
Logger
Status
Description
Redis Publisher
Production ready
Publishes logs to Redis pub/sub channels
Kafka Producer
Production ready
Sends logs to Apache Kafka topics
NSQ
Beta support
Publishes logs to NSQ topics
MQTT Publisher
Beta support
Publishes DNS logs to MQTT brokers
Logger
Status
Description
Falco
Beta support
Integration with Falco security monitoring
OpenTelemetry
Experimental
Distributed tracing support
DevNull
Production ready
Discards all logs (Performance testing)