@jackjack most OSes don't store dns logs by default, so you need to have something you're collecting dns logs from