It's possible to collect and analyze DNS queries forwarded through the system. To start logging DNS data browse to
Security → Log settings and select the second tab
Lawful interception. Enable the option and define optionally whether subdomains should be accounted for (and how many levels deep) or not.