<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE lire:report-spec PUBLIC
  "-//LogReport.ORG//DTD Lire Report Specification Markup Language V2.0//EN"
  "http://www.logreport.org/LRSML/2.0/lrsml.dtd">
<lire:report-spec xmlns:lire="http://www.logreport.org/LRSML/"
 superservice="dnszone" id="top-denied-axfr" charttype="bars">

 <lire:title>Top Denied AXFR Requests</lire:title>
 <lire:description>
  <para>This report lists the top 10 of denied AXFR requests.</para>
 </lire:description>

 <lire:param-spec>
  <lire:param name="hosts_to_show" type="int" default="10">
   <lire:description>
    <para>This parameter controls the number of hosts to
     display in the report.
    </para>
   </lire:description>
  </lire:param>
  <lire:param name="zones_to_show" type="int" default="10">
   <lire:description>
    <para>This parameter controls the number of zones to
     display in the report.
    </para>
   </lire:description>
  </lire:param>
 </lire:param-spec>

 <lire:display-spec>
  <lire:title>Number of denied AXFRs by zone, Top $zones_to_show</lire:title>
 </lire:display-spec>

 <lire:filter-spec>
  <lire:match value="$axfr_what" re="denied"/>
 </lire:filter-spec>

 <lire:report-calc-spec>
  <lire:group sort="-axfr_host-total" limit="$zones_to_show">
   <lire:field name="axfr_zone"/>

   <lire:group sort="-axfr_host-total" limit="$hosts_to_show">
    <lire:field name="axfr_host"/>

    <lire:count name="axfr_host-total" label="Denied Transfers"/>
    <lire:count name="axfr_host-ratio" ratio="table" label="% Total"/>
    <lire:count name="axfr_host-group_ratio" ratio="group" label="% Group"/>
   </lire:group>
  </lire:group>

 </lire:report-calc-spec>

</lire:report-spec>
