I'm looking to parse DNS logs (query/answer) from our environment, and am wondering if there's a parser that works for this?
DNS -Verbose, and DNS_verbose_lua exist in the Live feeds, but doesn't specify _if_ it pulls from MS's dns.log. Our DNS is handled mostly by Win2008 machines.
The parsers you mention are both Network Parsers used by the SA Packet Decoder. They register meta for DNS queries based on the packet capture being performed by the Packet Decoder.
To read the DNS logs from a Windows Server you will need to use a Log Decoder (and/or Log Collector), and configure event collection for Windows events. The standard windows event parser (winevent_nic) supports Microsoft DNS logs. You may need to ensure that you include the DNS events channel for collection by the Log Collector: Configure Windows Event Sources - RSA Security Analytics Documentation