Amazon Route 53

Version: Amazon Route 53.

Route 53 is a DNS service in AWS that connects the internet traffic to appropriate servers hosting the requested web application.

Netsurion Open XDR manages logs retrieved from Amazon Route 53. The alerts, reports, dashboards, and saved searches in Netsurion Open XDR are enhanced by capturing important and critical activities in Amazon Route 53.

The following are the key Data Source Integration available in Netsurion Open XDR.

Reports

TypeNameDescription
ComplianceAmazon Route 53 – DNS Query ActivitiesProvides details about activities related to DNS queries in Amazon Route 53.

Dashboards

TypeNameDescription
SecurityAmazon Route 53 – DNS queries by geolocation of clientDisplays the DNS queries of clients based on the geolocation.
SecurityAmazon Route 53 – DNS queries by geolocation of resolverDisplays the DNS queries based on the resolver according to its location.
SecurityAmazon Route 53 – DNS queries domain by resolver IPDisplays the DNS query domain based on the resolver IP address.
ComplianceAmazon Route 53 – DNS queries by volumeDisplays the DNS queries by volume irrespective of the DNS log type.
ComplianceAmazon Route 53 – DNS queries by response typesDisplays the DNS queries based on the response types.
ComplianceAmazon Route 53 – DNS queries by query typesDisplays the DNS queries based on the query types.

Saved Searches

TypeNameDescription
ComplianceAmazon Route 53 – DNS query activitiesProvides details about activities related to DNS queries in Amazon Route 53.

Documentation

The configuration details are consistent with Netsurion Open XDR 9.3 and later, and Amazon Route 53.

Download Integration Guide for configuration instructions and more information.