diff --git a/AGHTechDoc.md b/AGHTechDoc.md
index 0041f3e2..fb61e83f 100644
--- a/AGHTechDoc.md
+++ b/AGHTechDoc.md
@@ -1423,6 +1423,7 @@ When a new DNS request is received and processed, we store information about thi
 		"Reason":3,
 		"Rule":"...",
 		"FilterID":1,
+		"ServiceName":"..."
 		},
 	"Elapsed":12345,
 	"Upstream":"...",
diff --git a/querylog/decode.go b/querylog/decode.go
index fc3f84eb..d0346daf 100644
--- a/querylog/decode.go
+++ b/querylog/decode.go
@@ -56,6 +56,8 @@ func decodeLogEntry(ent *logEntry, str string) {
 		case "Reason":
 			i, err = strconv.Atoi(v)
 			ent.Result.Reason = dnsfilter.Reason(i)
+		case "ServiceName":
+			ent.Result.ServiceName = v
 
 		case "Upstream":
 			ent.Upstream = v