DNS Monitor - Troubleshooting

DNS Monitor - Troubleshooting

Common DNS Monitor Errors and Troubleshooting Guide

1. Host Not Found

  1. Description: The DNS server was unable to locate the requested lookup address.
  2. Possible Causes: This may happen if the hostname is incorrect, the domain does not exist, or there is a network or DNS configuration issue.
  3. Troubleshooting:
    1. Verify the hostname and domain name are correct.
    2. Use nslookup <hostname> in a command prompt from the Applications Manager server to manually test DNS resolution.
    3. If nslookup was successful resolving the IP address, then try adding the monitor.

2. Timed Out

  1. Description: The DNS server was unable to resolve the request due to a timeout.
  2. Possible Causes: This can occur if the server is overloaded, network connectivity is unstable, or there is a delay in the response from an upstream server.
  3. Troubleshooting:
    1. Try increasing the timeout and try again.
    2. Use nslookup <hostname> in a command prompt from the Applications Manager server to manually test DNS resolution.
    3. If the issue persists, check the network connection, DNS server configuration, and server logs for additional details.

3. Type Not Found

  1. Description: The selected record type is not available on the DNS server.
  2. Possible Causes: This may happen if the DNS server does not support the requested record type or if the record type is not configured for the specified domain.
  3. Troubleshooting:
    1. Choose a supported record type that is configured on the DNS server.
    2. Run the command in terminal nslookup -type=<record_type> <hostname> and verify if the record type is configured in the server.
      1. Eg - nslookup -type=AAAA apm-server
    3. If nslookup command was successful, try adding the monitor.
    4. If the available record types are not known, contact the DNS server administrator to identify the supported record types for the specified domain.

4. SERVFAIL

  1. Description: The DNS server encountered an internal error while processing the request.
  2. Possible Causes: This error may be due to server misconfiguration, network issues, or problems with upstream DNS servers.
  3. Troubleshooting:
    1. Use nslookup <hostname> in a command prompt from the Applications Manager server to manually test DNS resolution.
    2. Check the DNS server logs for more detailed information on the error.
    3. Investigate potential issues with server settings, network connectivity, or the upstream DNS configuration.
    4. Check with DNS server administrator for resolving the SERVFAIL internal error.

5. NOTIMP

  1. Description: The selected record type is not supported by the DNS server.
  2. Possible Causes: This occurs if the DNS server does not implement or support the requested record type.
  3. Troubleshooting:
    1. Choose a record type that is supported by the DNS server.
    2. Run the command in terminal nslookup -type=<record_type> <hostname> and verify if the record type is configured in the server.
      1. Eg - nslookup -type=AAAA apm-server
    3. Confirm compatibility of the requested record type with the DNS server’s configuration.
    4. If the available record types are not known, contact the DNS server administrator to identify the supported record types for the specified domain.

6. REFUSED

  1. Description: The DNS server refused the query.
  2. Possible Causes: This may happen if the server is queried for a domain, it does not manage, or if it has been configured to restrict certain queries. It can also occur if recursion is disabled or if access permissions prevent the query from being processed.
  3. Troubleshooting:
    1. Use nslookup <hostname> in a command prompt from the Applications Manager server to manually test DNS resolution.
    2. If nslookup was successful resolving the IP address, then try adding the monitor.
    3. Verify the server’s configuration to ensure it is set up to handle the requested domain and record type.
    4. Confirm that recursion settings and access permissions are correctly configured.
    5. Check with DNS server administrator for troubleshooting the issue further.

7. SERVFRecord TypeIL (SERVFAIL Due to Record Type)

  1. Description: The DNS server encountered a failure while processing the query (SERVFAIL), likely due to issues with the requested record type.
  2. Possible Causes: Server misconfiguration, DNSSEC validation issues, problems with upstream server connections, or unsupported record types.
  3. Troubleshooting:
    1. Check the DNS server configuration.
    2. Ensure that DNSSEC settings are correct if enabled.
    3. Verify that the requested record type is supported by the server and consult server logs for detailed error information.
    4. Run the command in terminal nslookup -type=<record_type> <hostname> and verify if the record type is configured in the server.
      1. Eg - nslookup -type=AAAA apm-server
    5. Check with DNS server administrator for checking the issue further.

8. OneElement(ANY)

  1. Description: The oneElement(ANY) error appears when a DNS query is made with the ANY record type, requesting all DNS records associated with a domain. Some DNS servers are configured to limit responses to ANY queries due to performance concerns, security policies, or to protect against abuse, resulting in this error
  2. Possible Causes: If no specific record type is selected, the default record type will be set to ANY, which could cause this error if the server does not support ANY queries
  3. Troubleshooting:
    1. Choose a record type that is supported by the DNS server and try again.
    2. Run the command in terminal nslookup -type=<record_type> <hostname> and verify if the record type is configured in the server.
      1. Eg - nslookup -type=AAAA apm-server
    3. If the available record types are not known, contact the DNS server administrator to identify the supported record types for the specified domain.

9.NOTAUTH

  1. Description: The NOTAUTH (Not Authorized) DNS error occurs when a DNS server refuses a query or update request because it is not authoritative for the specified zone or lacks the necessary permissions to perform the operation.
  2. Possible Causes: 
    1. Non-Authoritative Server: The DNS server being queried is not authoritative for the requested zone.
    2. Access Restrictions: The server is configured to deny certain types of queries, either globally or for specific zones.
    3. Incorrect Query Target: The query or update request is sent to the wrong DNS server.
    4. Delegation Issues: Zone delegation may be improperly configured, leading the query to a non-authoritative server.
  3. Troubleshooting:
    1. Confirm that the DNS server is properly configured as authoritative for the zone.
    2. Verify that the zone files are present and correctly loaded on the server.
    3. Review the server’s access control lists (ACLs) and security settings to ensure they permit the requested operation.
    4. Verify that the zone delegation is correctly configured. Check that the parent zone points to the correct authoritative servers for the subzone.
    5. Use the below commands for troubleshooting the issue
      1. dig <hostname> +trace - For Linux
      2. nslookup -d2 <hostname> - For Windows
    6. Check with DNS server administrator for checking the issue further.

10. UNRECOVERABLE Error (Data or Server Error)

  1. Description: The UNRECOVERABLE DNS error indicates that a non-recoverable issue has occurred during DNS resolution, preventing the query from being processed. This error is typically returned when a critical failure or configuration issue makes the resolution process impossible to continue.
  2. Possible Causes: 
    1. Severe Misconfiguration: DNS server or zone file configurations are incorrect, leading to an unresolvable state.
    2. Corrupted Zone Data: Zone files on the server may be corrupted or incomplete.
    3. Recursive Query Failures: Failure in resolving queries via recursive DNS due to broken chains of trust or missing delegation records.
    4. Network Issues: Major network connectivity problems prevent the client or DNS server from reaching upstream servers.
  3. Troubleshooting:
    1. Ensure the DNS server and client have a stable network connection.
    2. Inspect the server's configuration files to ensure all settings are correct.
    3. Confirm that zone files are properly formatted and loaded.
    4. Review the server logs for detailed information about the error. Look for clues related to zone loading, query processing, or system failures.
    5. Choose different Record Type and try. If no record type is selected, default will be ANY.
    6. If the issue involves a specific domain, verify that the parent zone properly delegates authority to the server managing the domain.
    7. Use nslookup <hostname> in a command prompt from the Applications Manager server to manually test DNS resolution.
    8. Use the below commands for troubleshooting the issue
      1. dig <hostname> +trace - For Linux
      2. nslookup -d2 <hostname> - For Windows
    9. Check with DNS server administrator for checking the issue further.

11. No records associated

  1. Description: The host exists, but has no records associated with the queried type.
  2. Possible Causes: The selected record type does not exists in the server
  3. Troubleshooting:
    1. Choose a record type that is supported by the DNS server and try again.
    2. If no record type is selected, ANY will be default type. Try choosing a supported record type and try again.

12. Network Error

  1. Description: Issues with network connectivity to the DNS server.
  2. Possible Causes: Incorrect DNS server address or connectivity issues.
  3. Troubleshooting:
    1. Ensure DNS server host/ IP Address given is correct.
    2. Check the network connection.
    3. Run ping <hostname> command and check if the DNS server is reachable.
    4. Check if the security configuration is not blocking the host.
    5. Use nslookup <hostname> in a command prompt from the Applications Manager server to manually test DNS resolution.
    6. If the nslookup command is successful, then try adding the DNS monitor.
    7. If ping/nslookup command is failed, check with the internal network team for resolving the issue.
    8. Run the command in terminal nslookup -type=<record_type> <hostname> and verify if the record type is configured in the server.
      1. Eg - nslookup -type=AAAA apm-server
    9. If the available record types are not known, contact the DNS server administrator to identify the supported record types for the specified domain.


                  New to ADSelfService Plus?

                    • Related Articles

                    • Mail Server Monitor - Troubleshooting

                      Common Mail Server Monitor Errors and Troubleshooting Guide 1. Unknown Host Error Description: This error occurs when the mail client cannot resolve the hostname of the mail server to an IP address. The issue typically arises from DNS resolution ...
                    • Real User Monitor (RUM) - Troubleshooting

                      If the monitor has not polled data for a long time, follow the steps below for troubleshooting: Step 1: Check the RUM Agent configuration Real User Monitor requires the RUM Agent to be installed and mapped to the Applications Manager. Refer the help ...
                    • Troubleshooting URL Monitor

                      Here are few of the common errors you may come across in URL monitor, we have mentioned the steps you can follow to troubleshoot them. General troubleshooting for URL monitor Ensure that the URL is accessible from the server in which Applications ...
                    • PHP Monitor Troubleshooting

                      PHP Monitor Errors and Troubleshooting Guide Check if the phpstats.php file in the webserver's document root. Ensure there is no modifications done in phpstats.php file Check if the correct PHP path is given. Retry with the "SSL is enabled" option ...
                    • REST API Monitor - FAQS

                      1. What should I do when Basic Authentication fails in REST API monitor? Verify if the credentials provided in the Applications Manager are correct. Try if sending username and password in Authorization request header works Get an BASE-64 encoded ...