Description

Noticing the following DNS alert on the Insights panel on the mist portal

----------

Client

XXXXX

AP

XXXX

MAC Address

XX:XX:XX

Client IP Address

x.x.x.x

BSSID

xx:xx

SSID

XX:XX

VLAN

410

Band

5 GHz

DNS Servers


Description

Failing DNS query from xxxx to xxx for "ssid" on vlan xx, id xx

Count

1

Throttle End Time


Symptoms

DNS related alert are populated in Insights panel of the MIST portal

Solution

These alert are not related to SSR. In full stack MIST implementation it is important to identify and isolate the device which is source of the alert.

This can be done by looking up on the mac id which is present as part of the alert.

The above alert is from AP and not SSR.

Modification History

2025-10-16 : Article Created