The DNS queries that netobserv does are not optimized, leading to frequent DNS NXDOMAIN when resolved. For instance, querying for:
loki.netobserv.svc
results in several DNS lookups with different combinations of appended suffixes; all will fail, except that one:
loki.netobserv.svc.cluster.local

We can prevent those suffix combination lookups by appending a "." at the end of the complete URL:
loki.netobserv.svc.cluster.local.

A way to observe the problem is using the new health & alerts feature with DNS tracking enabled (you will see netobserv among the unhealthy namespaces), or using the new DNS QNAME feature (you will see weird QNAME in flp-to-coredns traffic, with NXDOMAIN error)

The tech-preview DNS Alerts should also be updated to decrease severity of NxDomain errors.