/
Number of unique clients over a month

Number of unique clients over a month

The following query gives the number of unique DNS clients (src ip addresses) per day over a given month. Note that this can run for a few minutes:


 select year, month, day, count(*), count(distinct(src)) from dns.queries where year=2017 and month=10  group by year, month, day order by day asc;

This can also (obviuosly) be extented to check for a given domain name (and then runs faster), such as:

select year, month, day, count(*), count(distinct(src)) from dns.queries where domainname = 'mycooldomain.tld' AND year=2017 and month=10  group by year, month, day order by day asc;