Re: Bind Service & Script
Frank Crawford <[email protected]> Thu, 19 Apr 2018 22:05:34 +1000
| Newsgroups | gmane.comp.log.logwatch.devel |
|---|---|
| Message-ID | <[email protected]> |
--===============3755350918974465088==
Content-Type: multipart/alternative; boundary="=-JJ9Y7kMQ1Cj3HA0RQ9oW"
--=-JJ9Y7kMQ1Cj3HA0RQ9oW
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit
Dennis,
Isn't the "named" module what you need? It does look through
/var/log/messages for the output, not a dedicated bind file, but still
it is what I see for my DNS server output.
Frank
On Wed, 2018-04-18 at 17:28 +0300, Klaipedaville on Google wrote:
>
> Hello everybody,
>
>
>
> I can’t believe it that the latest Logwatch 7.4.3 still does not have
> any
> Bind services and scripts. Am I wrong? I tried to "feed" bind9’s
> regular log
> files to named but it won’t parse them. Could anybody advise, please
> on how to
> make Logwatch "report" Bind? The standard / regular log files in
> Bind9 are setup
> like this:
>
>
>
> logging {
>
> channel bind_log {
>
> file "/var/log/bind/bind.log" versions 3 size 5m;
>
> severity info;
>
> print-category yes;
>
> print-severity yes;
>
> print-time yes;
>
> };
>
> };
>
>
>
> and what the logging produces as the outcome looks like this:
>
>
>
> 18-Apr-2018 11:36:14.961 queries: info: client 1.2.3.4#52132: query:
> ns2.barcap.com IN A + (1.2.3.4)
>
> 18-Apr-2018 11:36:14.961 queries: info: client 1.2.3.4#52132: query:
> a10-66.akam.net IN A + (1.2.3.4)
>
> 18-Apr-2018 11:36:14.962 queries: info: client 1.2.3.4#52132: query:
> a9-66.akam.net IN A + (1.2.3.4)
>
> 18-Apr-2018 11:36:14.962 queries: info: client 1.2.3.4#132: query:
> ns7.barcap.com IN A + (1.2.3.4)
>
> 18-Apr-2018 11:36:14.963 queries: info: client 1.2.3.4#52132: query:
> ns3.barcap.com IN A + (1.2.3.4)
>
> 18-Apr-2018 11:36:14.963 queries: info: client 1.2.3.4#52132: query:
> a1-71.akam.net IN A + (1.2.3.4)
>
> 18-Apr-2018 11:36:14.964 queries: info: client 1.12.3.4#52132:
> query:
> a12-64.akam.net IN A + (1.2.3.4)
>
>
>
> I would be really grateful for any pointers, suggestions,
> recommendations,
> assistance.
>
>
>
> Many thanks in advance!
>
>
>
> Regards,
>
> Dennis
>
>
>
>
> -------------------------------------------------------------------
> -----------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot__________
> _____________________________________
> Logwatch-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/logwatch-devel
--=-JJ9Y7kMQ1Cj3HA0RQ9oW
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: 8bit
<html><head></head>
<body dir="ltr"><div>Dennis,</div><div><br></div><div>Isn't the "named" module what you need? It does look through /var/log/messages for the output, not a dedicated bind file, but still it is what I see for my DNS server output.</div><div><br></div><div>Frank</div><div><br></div><div>On Wed, 2018-04-18 at 17:28 +0300, Klaipedaville on Google wrote:</div><blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex">
<div dir="ltr">
<div style="FONT-SIZE: 12pt; FONT-FAMILY: 'Calibri'; COLOR: #000000">
<div>Hello everybody, </div>
<div> </div>
<div>I can’t believe it that the latest Logwatch 7.4.3 still does not have any
Bind services and scripts. Am I wrong? I tried to "feed" bind9’s regular log
files to named but it won’t parse them. Could anybody advise, please on how to
make Logwatch "report" Bind? The standard / regular log files in Bind9 are setup
like this:</div>
<div> </div>
<div>logging {</div>
<div>channel bind_log {</div>
<div>file "/var/log/bind/bind.log" versions 3 size 5m;</div>
<div>severity info;</div>
<div>print-category yes;</div>
<div>print-severity yes;</div>
<div>print-time yes;</div>
<div> };</div>
<div>};</div>
<div> </div>
<div>and what the logging produces as the outcome looks like this:</div>
<div> </div>
<div>18-Apr-2018 11:36:14.961 queries: info: client 1.2.3.4#52132: query:
ns2.barcap.com IN A + (1.2.3.4)</div>
<div>18-Apr-2018 11:36:14.961 queries: info: client 1.2.3.4#52132: query:
a10-66.akam.net IN A + (1.2.3.4)</div>
<div>18-Apr-2018 11:36:14.962 queries: info: client 1.2.3.4#52132: query:
a9-66.akam.net IN A + (1.2.3.4)</div>
<div>18-Apr-2018 11:36:14.962 queries: info: client 1.2.3.4#132: query:
ns7.barcap.com IN A + (1.2.3.4)</div>
<div>18-Apr-2018 11:36:14.963 queries: info: client 1.2.3.4#52132: query:
ns3.barcap.com IN A + (1.2.3.4)</div>
<div>18-Apr-2018 11:36:14.963 queries: info: client 1.2.3.4#52132: query:
a1-71.akam.net IN A + (1.2.3.4)</div>
<div>18-Apr-2018 11:36:14.964 queries: info: client 1.12.3.4#52132: query:
a12-64.akam.net IN A + (1.2.3.4)</div>
<div> </div>
<div>I would be really grateful for any pointers, suggestions, recommendations,
assistance.</div>
<div> </div>
<div>Many thanks in advance!</div>
<div> </div>
<div>Regards,</div>
<div>Dennis</div>
<div>
<div style="FONT-SIZE: small; FONT-FAMILY: 'Calibri'; FONT-WEIGHT: normal; COLOR: #000000; FONT-STYLE: normal; TEXT-DECORATION: none; DISPLAY: inline"></div> </div></div></div>
<pre>------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! <a href="http://sdm.link/slashdot">http://sdm.link/slashdot</a></pre><pre>_______________________________________________
Logwatch-devel mailing list
<a href="mailto:[email protected]">[email protected]</a>
<a href="https://lists.sourceforge.net/lists/listinfo/logwatch-devel">https://lists.sourceforge.net/lists/listinfo/logwatch-devel</a>
</pre></blockquote></body></html>
--=-JJ9Y7kMQ1Cj3HA0RQ9oW--
--===============3755350918974465088==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
--===============3755350918974465088==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
Logwatch-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/logwatch-devel
--===============3755350918974465088==--