i am running a pihole with coredns for tls termination so i can use android 9's private dns feature with it. Everything works well, except that in the pihole stats, every request is coming from localhost.localdomain. This is caused by the fact, that coredns accepts all requests first and just forwards them to pihole-FTL.
I really want to see the real IP adresses in the pi-hole stats. Where does the pihole load the IPs from? Is it the log file*? Is it the ftl.db? Is there some sort of hook i can use to inject the correct ip-adresses? Coredns has a wonderful query-log feature and it would be a shame if i couldn't use this to integrate into the pihole stats
*Which parts of the log file are really used for statistics? Is it only the query or also the response?
I suspect that rather than injecting into one of the existing tables inside /etc/pihole/pihole-FTL.db that it may be better to create a new table then get Core DNS to write to that (date time, domain queried , local IP etc etc ) then do a union to get the stats back.
Of course its (relatively) early morning after a night out and I haven't drunk my coffee yet and I may be talking tosh.
Thinking further out loud you would probably end up needing to write a custom stats page as well ., or just export for analysis in excel
You can use AWstats. I think this one is the best in the market right now. If you have a problem in thinking of the name for your database, then you can use the Steam Name Generator, with the help of this you can easily generate the names of any type and use it easily for any of your tasks. The link ( https://eleggible.com/best-steam-name-generator-tools/
) i'm sharing with you.