detection.wiki

Microsoft-Windows-DNS-Server-Service › Event 4

Event ID 4 — The DNS server has finished the background loading and signing of zones.

Provider
Microsoft-Windows-DNS-Server-Service
Channel
DNS Server
Level
Informational

Description

The DNS server has finished the background loading and signing of zones. All zones are now available for DNS updates and zone transfers, as allowed by their individual zone configuration.

Message #

The DNS server has finished the background loading and signing of zones. All zones are now available for DNS updates and zone transfers, as allowed by their individual zone configuration.

Fields #

NameDescription
Name—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-DNS-Server-Service",
    "guid": "71A551F5-C893-4849-886B-B5EC8502641E",
    "event_source_name": "",
    "event_id": 4,
    "version": 0,
    "level": 4,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775824,
    "time_created": "2022-04-07T08:31:21.436717+00:00",
    "event_record_id": 21,
    "correlation": {},
    "execution": {
      "process_id": 2780,
      "thread_id": 4540
    },
    "channel": "DNS Server",
    "computer": "WIN-FPV0DSIC9O6.lab.local",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Name": "DNS_EVENT_ZONE_LOAD_COMPLETE"
  },
  "message": ""
}

References #