Query Logs from Cname

Hello All,

Is it possible to do a long term search for cname in the log files with a words like "blocked" to show up in the final results. As sometime the user will not know the domain to find, if it not, is it possible to add this feature in the search pattern.

Thanks in advance