watch_logs
Watch a profile's DNS queries live for 5-120 seconds, then list each with time, status, domain, device, and reason, plus blocked count. Use while opening apps; logs must be on.
Instructions
Watch a profile's DNS queries live for 5 to 120 seconds, for example while the user opens an app ("open TikTok now"), then list what came in, one line each with time, status, domain, device and reason, and how many were blocked. Use logs for past queries and analytics for totals. Changes nothing, but the call waits the whole time; logs must be on for the profile, or nothing comes in.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| raw | No | true: every query. false (default): only the useful ones (A, AAAA and HTTPS, without repeats). | |
| device | No | Only this device: a device ID from the devices report, or __UNIDENTIFIED__. | |
| search | No | Part of a domain to look for: facebook matches facebook.com, fbcdn.net and others. | |
| status | No | Only queries with this result: blocked, allowed, default or error. | |
| profile | No | The profile's ID or name. Leave empty for the only profile, or the default one. | |
| seconds | No | How long to watch, 5 to 120 seconds. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |