We are receiving bulk alerts on url_response probe for DNS resolution time threshold breach like this:
"Url dns resolve time is 3330 ms which is greater than threshold 1000ms."
Which exact DNS is been considered by the url_response probe to trigger these alarms?
Release : 20.3
Component : UIM - URL_RESPONSE
DNS Resolution time for this alarm is set in url_response configuration Profile.
the probe will use the DNS servers configured in the operating system.
In any operating system you can set an order, preference or priority for DNS servers list.
The probe will use that order.
It will start with the first one, and if that resolve the name, that will be used.
If no resolution, or no contact, it will try the next in the list, and it will continue doing that until get a resolution or reaches the latest DNS server.
The alarm will be asserted if the DNS server used to resolve the name exceeded the timeout defined in the profile configuration.