Bind

Decent logging options

logging {
    channel default_syslog {
        syslog;
//      severity notice; // Revert to this once everything is running
        severity dynamic; // Debugging
        print-time NO;
        print-severity YES;
        print-category YES;
    };
        channel zone_transfers_log {
//      file "/var/named/data/zone_transfers" versions 3 size 20m;
        file "/var/named/data/zone_transfers.log";
        print-time yes;
            print-category yes;
            print-severity yes;
            severity info;
        };
        channel queries_log {
//      file "/var/named/data/queries" versions 5 size 20m;
        file "/var/named/data/queries.log";
        print-time yes;
        print-category yes;
        print-severity yes;
        severity dynamic;
        };
        channel query-errors_log {
//      file "/var/named/data/queries-errors" versions 5 size 20m;
        file "/var/named/data/queries-errors.log";
        print-time yes;
        print-category yes;
        print-severity yes;
        severity dynamic;
        };
    channel client_security_log {
//      file "/var/named/data/client_security" versions 3 size 20m;
        file "/var/named/data/client_security.log";
        print-time yes;
        print-category yes;
        print-severity yes;
        severity info;
    };
    channel ddns_log {
//      file "/var/named/data/ddns" versions 3 size 20m;
        file "/var/named/data/ddns.log";
        print-time yes;
        print-category yes;
        print-severity yes;
        severity info;
    };
    channel auth_servers_log {
//      file "/var/named/data/auth_servers" versions 5 size 3m;
        file "/var/named/data/auth_servers.log";
        print-time yes;
        print-category yes;
        print-severity yes;
        severity info;
    };
    category default { default_syslog; default_debug; };
    category general { default_syslog; default_debug; };
    category client { default_syslog; default_debug; client_security_log; };
    category config { default_syslog; default_debug; };
    category database { default_syslog; default_debug; };
    category lame-servers { default_syslog; default_debug; auth_servers_log; };
    category network { default_syslog; default_debug; };
    category notify { default_syslog; default_debug; zone_transfers_log; };
    category queries { default_syslog; default_debug; queries_log; };
    category query-errors { default_syslog; default_debug; query-errors_log; };
    category resolver { default_syslog; default_debug; auth_servers_log; };
    category security { default_syslog; default_debug; client_security_log; };
    category update { default_syslog; default_debug; ddns_log; };
    category update-security { default_syslog; default_debug; ddns_log; };
    category xfer-in { default_syslog; default_debug; zone_transfers_log; };
    category xfer-out { default_syslog; default_debug; zone_transfers_log; };
    category cname { default_syslog; auth_servers_log; };
};
---- logrotate.d companion ------
/var/log/named/*.log {
  su named named
  compress
  create 0644 named named
  daily
  dateext
  missingok
  notifempty
  rotate 30
  sharedscripts

  postrotate
        /usr/bin/systemctl reload named.service > /dev/null 2>&1 || true
        /usr/bin/systemctl reload named-chroot.service > /dev/null 2>&1 || true
        /usr/bin/systemctl reload named-sdb.service > /dev/null 2>&1 || true
        /usr/bin/systemctl reload named-sdb-chroot.service > /dev/null 2>&1 || true
        /usr/bin/systemctl reload named-pkcs11.service > /dev/null 2>&1 || true
  endscript
}

Last modified: Tue May 14 08:55:57 2024