| Subcommand | Description | Syntax |
|---|
domain | Extracts the domain component from a hostname based on the public suffix list | domain(<expr>) |
tld | Extracts the top level domain (TLD) component from a hostname based on the public suffix list | tld(<expr>) |
resolveip | Resolves a domain name to an IP address | resolveip(<expr>) |
resolveptr | Performs a reverse DNS lookup for an IP address | resolveptr(<expr>) |
resolve | Resolves a domain name to DNS records of a specified type | resolve(<expr>, <expr>) |
| eval domain = domain(<expr>)
| eval tld = tld(<expr>)
| eval ip = resolveip(<expr>)
| eval hostname = resolveptr(<expr>)
| eval records = resolve(<expr>, "A")