How to configure DNS LookUp monitor with multiple A records?

Document ID : KB000010900
Last Modified Date : 14/02/2018
Show Technical Document Details

A Domain Name Service (DNS) A record for a domain name provides the IP address (IPv4) of the computer hosting that domain. A domain can have more than one A record associated to it and this article discusses on how to configure the CA ASM DNS Lookup Monitor for a domain with multiple DNS A records.


This article demonstrates configuration scenarios using the DNS records for as example. The records can be obtained from a DNS tool internet site e.g.

Yahoo DNS record.png

CA App Synthetic Monitor (CA ASM) 10.x

From CA ASM 10.x onward, a new field named Match type has been added to the DNS Monitor settings > Advanced tab. It consists of 3 options: Subset, Equal and Superset.


Below are the steps to create a DNS monitor for a domain with multiple DNS A records:

1. Login to your CA ASM portal, and select Monitoring > Monitors > New Monitor

2. Select DNS for monitor type:

Select Monitor Type - DNS.png


3. In the New DNS monitor > General Parameters page, enter the relevant information as follow:

    Note: In this example, all 3 IPs (,, were entered into the Expected result field.

New DMS monitor General Parameters.png


4. Click on the Advanced tab on the left, and select the desired option for the Match type field:

Subset match passes if found records are a subset of the expected result (e.g. the found record is an item from the expected pool).
Equal match passes if found and expected result lists are equal.
Superset match passes if found records are a superset of the expected result (e.g. found records include all expected items).

E.g. if the expected result is, then found results passes as a subset, passes in all cases,, passes as a superset

Advanced Tab Match Type - Subset.png


In this case, as will always return all 3 IP addresses, the DNS Lookup checks will pass in all cases (Subset, Equal & Superset)

If you add one more dummy IP address in the Expected result field, the checks will only pass as Subset

If you remove one IP address from the Expected result field, the checks will only pass as Superset.


5. Click Save and you should see the check passes with the given configurations:

Check results.png


6. Click Activate to activate the DNS monitor, then go to Analysis > Logs to see the actual lookup results from all monitoring stations: