Skip to content

Pi-hole Logging Requirements

Danger, Will Robinson

Failing to perform the following will cause this add-on to not extract fields properly

Set log-queries=extra in the pihole dnsmasq configuration file. Pi-hole® recommends to make any changes to a new configuration file to avoid changes to be overridden during an update.

  1. Create a new file: /etc/dnsmasq.d/02-pihole-splunk.conf.
  2. Add log-queries=extra to the file. save and close the file
  3. Restart pi-hole with pihole restartdns
Last update: December 14, 2022