Splunk search command app providing dnsparse, which decodes a base64 DNS wire response and extracts parsed records/values.
... | dnsparse field=response_b64
Output fields:
dnsparse_valuesdnsparse_recordsdnsparse_query_countdnsparse_answer_countdnsparse_authority_countdnsparse_additional_countdnsparse_error(only when parse fails)
Run checks with uv run:
uv run pytest
uv run ruff check
uv run ty check