Re: Bind Service & Script
"Klaipedaville on Google" <[email protected]> Wed, 18 Apr 2018 17:28:03 +0300
| Newsgroups | gmane.comp.log.logwatch.devel |
|---|---|
| Message-ID | <BC5496CA8E404A8A88E2DF7CF441398A@Computer> |
This is a multi-part message in MIME format.
--===============4485350016471639003==
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0030_01D3D73A.9B73D110"
This is a multi-part message in MIME format.
------=_NextPart_000_0030_01D3D73A.9B73D110
Content-Type: text/plain;
charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hello everybody, =20
I can=E2=80=99t believe it that the latest Logwatch 7.4.3 still does not =
have any Bind services and scripts. Am I wrong? I tried to "feed" =
bind9=E2=80=99s regular log files to named but it won=E2=80=99t parse =
them. Could anybody advise, please on how to make Logwatch "report" =
Bind? The standard / regular log files in Bind9 are setup like this:
logging {
channel bind_log {
file "/var/log/bind/bind.log" versions 3 size 5m;
severity info;
print-category yes;
print-severity yes;
print-time yes;
};
};
and what the logging produces as the outcome looks like this:
18-Apr-2018 11:36:14.961 queries: info: client 1.2.3.4#52132: query: =
ns2.barcap.com IN A + (1.2.3.4)
18-Apr-2018 11:36:14.961 queries: info: client 1.2.3.4#52132: query: =
a10-66.akam.net IN A + (1.2.3.4)
18-Apr-2018 11:36:14.962 queries: info: client 1.2.3.4#52132: query: =
a9-66.akam.net IN A + (1.2.3.4)
18-Apr-2018 11:36:14.962 queries: info: client 1.2.3.4#132: query: =
ns7.barcap.com IN A + (1.2.3.4)
18-Apr-2018 11:36:14.963 queries: info: client 1.2.3.4#52132: query: =
ns3.barcap.com IN A + (1.2.3.4)
18-Apr-2018 11:36:14.963 queries: info: client 1.2.3.4#52132: query: =
a1-71.akam.net IN A + (1.2.3.4)
18-Apr-2018 11:36:14.964 queries: info: client 1.12.3.4#52132: query: =
a12-64.akam.net IN A + (1.2.3.4)
I would be really grateful for any pointers, suggestions, =
recommendations, assistance.
Many thanks in advance!
Regards,
Dennis
------=_NextPart_000_0030_01D3D73A.9B73D110
Content-Type: text/html;
charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<HTML><HEAD></HEAD>
<BODY dir=3Dltr>
<DIV dir=3Dltr>
<DIV style=3D"FONT-SIZE: 12pt; FONT-FAMILY: 'Calibri'; COLOR: #000000">
<DIV>Hello everybody, </DIV>
<DIV> </DIV>
<DIV>I can=E2=80=99t believe it that the latest Logwatch 7.4.3 still =
does not have any=20
Bind services and scripts. Am I wrong? I tried to "feed" bind9=E2=80=99s =
regular log=20
files to named but it won=E2=80=99t parse them. Could anybody advise, =
please on how to=20
make Logwatch "report" Bind? The standard / regular log files in Bind9 =
are setup=20
like this:</DIV>
<DIV> </DIV>
<DIV>logging {</DIV>
<DIV>channel bind_log {</DIV>
<DIV>file "/var/log/bind/bind.log" versions 3 size 5m;</DIV>
<DIV>severity info;</DIV>
<DIV>print-category yes;</DIV>
<DIV>print-severity yes;</DIV>
<DIV>print-time yes;</DIV>
<DIV> };</DIV>
<DIV>};</DIV>
<DIV> </DIV>
<DIV>and what the logging produces as the outcome looks like this:</DIV>
<DIV> </DIV>
<DIV>18-Apr-2018 11:36:14.961 queries: info: client 1.2.3.4#52132: =
query:=20
ns2.barcap.com IN A + (1.2.3.4)</DIV>
<DIV>18-Apr-2018 11:36:14.961 queries: info: client 1.2.3.4#52132: =
query:=20
a10-66.akam.net IN A + (1.2.3.4)</DIV>
<DIV>18-Apr-2018 11:36:14.962 queries: info: client 1.2.3.4#52132: =
query:=20
a9-66.akam.net IN A + (1.2.3.4)</DIV>
<DIV>18-Apr-2018 11:36:14.962 queries: info: client 1.2.3.4#132: query:=20
ns7.barcap.com IN A + (1.2.3.4)</DIV>
<DIV>18-Apr-2018 11:36:14.963 queries: info: client 1.2.3.4#52132: =
query:=20
ns3.barcap.com IN A + (1.2.3.4)</DIV>
<DIV>18-Apr-2018 11:36:14.963 queries: info: client 1.2.3.4#52132: =
query:=20
a1-71.akam.net IN A + (1.2.3.4)</DIV>
<DIV>18-Apr-2018 11:36:14.964 queries: info: client 1.12.3.4#52132: =
query:=20
a12-64.akam.net IN A + (1.2.3.4)</DIV>
<DIV> </DIV>
<DIV>I would be really grateful for any pointers, suggestions, =
recommendations,=20
assistance.</DIV>
<DIV> </DIV>
<DIV>Many thanks in advance!</DIV>
<DIV> </DIV>
<DIV>Regards,</DIV>
<DIV>Dennis</DIV>
<DIV>
<DIV=20
style=3D"FONT-SIZE: small; FONT-FAMILY: 'Calibri'; FONT-WEIGHT: normal; =
COLOR: #000000; FONT-STYLE: normal; TEXT-DECORATION: none; DISPLAY: =
inline"></DIV> </DIV></DIV></DIV></BODY></HTML>
------=_NextPart_000_0030_01D3D73A.9B73D110--
--===============4485350016471639003==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
--===============4485350016471639003==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
Logwatch-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/logwatch-devel
--===============4485350016471639003==--