5.15 DNSZoneTransfer

Use this Knowledge Script to monitor Domain Name Service (DNS) zone transfer activity. You can set a threshold for the number of zone transfer failures in an interval and a threshold for the percentage of zone transfers attempted that fail in an interval. This script raises an event if either the number or the percentage of zone transfer failures exceeds the threshold.

5.15.1 Resource Object

DNS folder

5.15.2 Default Schedule

The default interval for this script is Every 30 minutes.

5.15.3 Setting Parameter Values

Set the following parameters as needed:

Parameter

How to Set It

Event?

Set to y to raise an event if the number or percentage of zone transfer failures exceeds the threshold. The default is y.

Collect data?

Set to y to collect data for charts and reports. If enabled, data collection returns in five separate datastreams:

  • Number of zone transfer failures

  • Number of successful zone transfers

  • Number of requests received

  • Number of SOA (Start of Authority) requests sent

  • Percentage of zone transfers that failed

The default is n.

Number of zone transfer failures

Specify the maximum number of zone transfer failures that can occur before an event is raised. The default is 5.

Percentage of zone transfer failures

Specify the maximum percentage of zone transfer that can fail before an event is raised. The default is 20%.

Event severity

Set the event severity level, from 1 to 40, to indicate the importance of an event in which the number or percentage of zone transfer failures exceeds the threshold. The default severity level is 8 (red event indicator).