Is this even possible - which network client made a dns request?

[Oaktech]

The Palo Alto is showing me 4 or 5 connections an hour to a known spyware source (api.a-tu-zi.com) but of course as we are domain network all queries are showed as coming from the internal DNS server rather than the requesting internal client, is there any logging on the DNS server that might let me find out which internal client made the request to know where/who/what api.a-tu-zi.com was?

 

LeEdit - it's a 2003 MS server on a DC running built in DNS.

[pete]

I suspect the answer is "not unless you enable it because you're debugging something", yup: Select and enable debug logging options on the DNS server: Domain Name System(DNS)