I am in the process of parsing DNS query logs but I want to have them be correlated with our live feeds. Does anyone know a way to find out what meta value a feed is going to be searching off of? An example feed would be Malware Domain List. Alias.host? Domain? Web.page? no clue which one it is, any help would be awesome.
