I recently updated to 21.2R2-S2.3 to enable the new DNS DGA and Tunnel detection feature, applied the dns policy per Juniper instructions but its not working because this command always shows zero for all counters ->
show services security-metadata-streaming dns statistics
------------------------------
Jamie Graham
------------------------------