Stay organized with collections
Save and categorize content based on your preferences.
Resource: DnsThreatDetector
A DNS threat detector sends DNS query logs to a provider that then analyzes the logs to identify malicious activity in the DNS queries. By default, all VPC networks in your projects are included. You can exclude specific networks by supplying excludedNetworks.
Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
labels
map (key: string, value: string)
Optional. Any labels associated with the DnsThreatDetector, listed as key value pairs.
An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.
excludedNetworks[]
string
Optional. A list of network resource names which aren't monitored by this DnsThreatDetector.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-29 UTC."],[],[],null,["Resource: DnsThreatDetector A DNS threat detector sends DNS query logs to a *provider* that then analyzes the logs to identify malicious activity in the DNS queries. By default, all VPC networks in your projects are included. You can exclude specific networks by supplying `excludedNetworks`.\n\n| JSON representation |\n|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| ``` { \"name\": string, \"createTime\": string, \"updateTime\": string, \"labels\": { string: string, ... }, \"excludedNetworks\": [ string ], \"provider\": enum (/dns/docs/reference/dns-armor/rest/v1beta1/projects.locations.dnsThreatDetectors#Provider) } ``` |\n\n| Fields ||\n|----------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| `name` | `string` Immutable. Identifier. Name of the DnsThreatDetector resource. |\n| `createTime` | `string (`[Timestamp](https://protobuf.dev/reference/protobuf/google.protobuf/#timestamp)` format)` Output only. Create time stamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than \"Z\" are also accepted. Examples: `\"2014-10-02T15:01:23Z\"`, `\"2014-10-02T15:01:23.045123456Z\"` or `\"2014-10-02T15:01:23+05:30\"`. |\n| `updateTime` | `string (`[Timestamp](https://protobuf.dev/reference/protobuf/google.protobuf/#timestamp)` format)` Output only. Update time stamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than \"Z\" are also accepted. Examples: `\"2014-10-02T15:01:23Z\"`, `\"2014-10-02T15:01:23.045123456Z\"` or `\"2014-10-02T15:01:23+05:30\"`. |\n| `labels` | `map (key: string, value: string)` Optional. Any labels associated with the DnsThreatDetector, listed as key value pairs. An object containing a list of `\"key\": value` pairs. Example: `{ \"name\": \"wrench\", \"mass\": \"1.3kg\", \"count\": \"3\" }`. |\n| `excludedNetworks[]` | `string` Optional. A list of network resource names which aren't monitored by this DnsThreatDetector. Example: `projects/PROJECT_ID/global/networks/NETWORK_NAME`. |\n| `provider` | `enum (`[Provider](/dns/docs/reference/dns-armor/rest/v1beta1/projects.locations.dnsThreatDetectors#Provider)`)` Required. The provider used for DNS threat analysis. |\n\nProvider Name of the provider used for DNS threat analysis.\n\n| Enums ||\n|------------------------|--------------------------------------------|\n| `PROVIDER_UNSPECIFIED` | An unspecified provider. |\n| `INFOBLOX` | The Infoblox DNS threat detector provider. |\n\n| Methods ||\n|---------------------------------------------------------------------------------------------------|------------------------------------------------------------------|\n| [create](/dns/docs/reference/dns-armor/rest/v1beta1/projects.locations.dnsThreatDetectors/create) | Creates a new DnsThreatDetector in a given project and location. |\n| [delete](/dns/docs/reference/dns-armor/rest/v1beta1/projects.locations.dnsThreatDetectors/delete) | Deletes a single DnsThreatDetector. |\n| [get](/dns/docs/reference/dns-armor/rest/v1beta1/projects.locations.dnsThreatDetectors/get) | Gets the details of a single DnsThreatDetector. |\n| [list](/dns/docs/reference/dns-armor/rest/v1beta1/projects.locations.dnsThreatDetectors/list) | Lists DnsThreatDetectors in a given project and location. |\n| [patch](/dns/docs/reference/dns-armor/rest/v1beta1/projects.locations.dnsThreatDetectors/patch) | Updates a single DnsThreatDetector. |"]]