Generally Available: DNS flow trace logs for Azure Firewall

Azure Firewall now supports DNS flow trace logs — a new logging capability that gives you deep, end-to-end visibility into DNS traffic and name resolution paths. This enhancement provides richer telemetry to help you troubleshoot, validate, and secure DNS flows across your network. 

DNS flow trace logs build on existing DNS Proxy functionality by logging critical metadata including query types, response codes, queried domains, upstream DNS servers, and the source and destination IPs of each request. These insights enable faster diagnosis of application connectivity issues, improved auditing, and better security investigations. 

Key highlights                                                                  

• End-to-end DNS visibility — see each step of DNS resolution across your environment 
• Faster troubleshooting — pinpoint DNS failures and validate forwarding and custom DNS configuration 
• Cache insights  -- determine whether the Azure Firewall cache was used for DNS resolution 

Learn more:

• Read the monitoring data reference documentation.
• Learn about Azure Firewall Prescaling.