InfobloxInstall

Summary

Searches Infoblox Threat Defense DNS security policy hit events (GET /api/dnsdata/v2/dns_event) within a required time range, with optional filters on domain, client IP, policy and threat class.

Inputs

• Start Time (dnsEventT0) (required) — Start of the range (inclusive). Accepts a date/time, a numeric/string epoch in seconds (millisecond values over 1e12 are converted), and is sent as t0. Unparseable values become 0.
• End Time (dnsEventT1) (required) — End of the range (exclusive), same format handling as start; sent as t1.
• Return All — If true, pages through all results (1000 per page using _limit/_offset) until a short page is returned. Default false.
• Limit — Max events to return when Return All is off (sent as _limit). Default 100, minimum 1.
• Query Name — Filter by queried domain (qname). Omitted if empty.
• Query IP — Filter by the IP address that made the query (qip). Omitted if empty.
• Policy Name — Filter by security policy that generated the event (policy_name).
• Threat Class — Filter by threat class (threat_class), e.g. Malware, Phishing, MalwareC2.
• Query Parameters — Extra name/value query-string pairs added to the request (e.g. _filter, _fields). The time range and dedicated filter fields override same-named entries.

Output shape

A list of DNS event objects, emitted as one n8n item per event, as returned by the API.

Results are extracted from a top-level array or a results/result/items/data array; if none is found, the raw response is returned as a single item. Uses the Infoblox CSP API credential. With Continue On Fail, errors are emitted as an item with an error field.

Examples

Example 1: Pull the last day's malware hits for a specific domain

Start Time = yesterday, End Time = now, Query Name = malware.example.com, Threat Class = Malware, Return All off, Limit 100.

Example 2: Export all events for a client IP for incident review

Set Start/End Time to the incident window, Query IP = 192.0.2.10, Return All on.

Links

• n8n community nodes installation guide