<div dir="ltr"><div class="gmail_default" style="font-family:monospace,monospace">Hi guys,</div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace">problem solved.</div><div class="gmail_default" style="font-family:monospace,monospace">In my past configuration, syslog logging was enabled in order to create a dedicated logging file for both auth and recursor; the problem was that stdout collected by systemd journal was then copied to default syslog file in addition of dedicated ones and the result was that <i>/var/log/syslog</i> was flooded by a copy of the same messages (loglevel is set to maximum value for both auth and recursor for business reasons).</div><div class="gmail_default" style="font-family:monospace,monospace">So, I decided to handle logging directly with systemd journal and rsyslog filter in this way:</div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace">- both auth and recursor are installed on the same Ubuntu 18.04 server</div><div class="gmail_default" style="font-family:monospace,monospace">- using default systemd unit file for both auth and recursor</div><div class="gmail_default" style="font-family:monospace,monospace">- by default, rsyslog put every syslog facility message in <i>/var/log/syslog</i>, see <i>/etc/rsyslog.d/50-default.conf</i></div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace">...</div><div class="gmail_default" style="font-family:monospace,monospace">*.*;auth,authpriv.none -/var/log/syslog<br></div><div class="gmail_default" style="font-family:monospace,monospace">...</div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace">- I created <i>/etc/rsyslog.d/00-pdns-auth.conf </i></div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace"><i>:programname, isequal, "pdns_server" -/var/log/pdns/auth.log <br>:programname, isequal, "pdns_server" ~<br>:programname, isequal, "pdns" -/var/log/pdns/auth.log <br>:programname, isequal, "pdns" ~</i><br></div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace">and <i>/etc/rsyslog.d/00-pdns-rec.conf</i></div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace"><i>:programname, isequal, "pdns_recursor" -/var/log/pdns/rec.log <br>:programname, isequal, "pdns_recursor" ~</i> <br></div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace">- at the end of <i>/etc/logrotate.d/rsyslog</i>, I added:</div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace"><i>...</i></div><div class="gmail_default" style="font-family:monospace,monospace"><i>/var/log/pdns/auth.log<br>/var/log/pdns/rec.log<br>{<br> rotate 7<br> daily<br> missingok<br> notifempty<br> delaycompress<br> compress<br> postrotate<br> /usr/lib/rsyslog/rsyslog-rotate<br> endscript<br>}</i><br></div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace">- rsyslog restart and job done!</div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace">@Otto: as per documentation, setting <i>--daemon</i> and <i>--disable-syslog</i> seem to break logging, isn't it?.</div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace">Any further advice is welcome!</div><div class="gmail_default" style="font-family:monospace,monospace"><br></div><div class="gmail_default" style="font-family:monospace,monospace">Thanks to everyone!</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, 10 Apr 2020 at 09:19, Otto Moerbeek <<a href="mailto:otto@drijf.net" target="_blank">otto@drijf.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On Thu, Apr 09, 2020 at 09:23:09PM +0200, Klaus Darilion wrote:<br>
<br>
> My systemd service file has:<br>
> <br>
> ExecStart=/usr/sbin/pdns_server --config-name=%i --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no<br>
> <br>
> I can't remember if --disable-syslog is default or added by me.<br>
<br>
That's the default. systemd runs daemons in the non-classical way,<br>
they log to stdout and syslogd picks that up.<br>
<br>
-Otto<br>
<br>
> <br>
> regards<br>
> Klaus<br>
> <br>
> > -----Ursprüngliche Nachricht-----<br>
> > Von: Pdns-users <<a href="mailto:pdns-users-bounces@mailman.powerdns.com" target="_blank">pdns-users-bounces@mailman.powerdns.com</a>> Im Auftrag<br>
> > von Otto Moerbeek via Pdns-users<br>
> > Gesendet: Donnerstag, 9. April 2020 19:47<br>
> > An: Giovanni Vecchi <<a href="mailto:g.vecchi@certego.net" target="_blank">g.vecchi@certego.net</a>><br>
> > Cc: <a href="mailto:pdns-users@mailman.powerdns.com" target="_blank">pdns-users@mailman.powerdns.com</a><br>
> > Betreff: Re: [Pdns-users] Auth and Recursor dedicated logging only<br>
> > <br>
> > On Thu, Apr 09, 2020 at 06:52:23PM +0200, Giovanni Vecchi via Pdns-users<br>
> > wrote:<br>
> > <br>
> > > Hi guys,<br>
> > ><br>
> > > how to configure both auth and recursor to log only on syslog facility (and<br>
> > > not on stdout)?<br>
> > > From docu it seems that syslog logging is an addition only.<br>
> > <br>
> > daemon=yes stops the logging to stdout.<br>
> > <br>
> > -Otto<br>
> > _______________________________________________<br>
> > Pdns-users mailing list<br>
> > <a href="mailto:Pdns-users@mailman.powerdns.com" target="_blank">Pdns-users@mailman.powerdns.com</a><br>
> > <a href="https://mailman.powerdns.com/mailman/listinfo/pdns-users" rel="noreferrer" target="_blank">https://mailman.powerdns.com/mailman/listinfo/pdns-users</a><br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr"><div dir="ltr"><div><div dir="ltr"><pre style="font-family:"Courier New",Courier,monospace,arial,sans-serif;margin-top:0px;margin-bottom:0px;white-space:pre-wrap;color:rgb(0,0,0);font-size:14px"><table border="0" cellspacing="0" cellpadding="0" style="font-family:"Times New Roman";width:420px"><tbody><tr valign="top"><td><table border="0" cellspacing="0" cellpadding="0"><tbody><tr valign="top"><td style="text-align:initial;vertical-align:top;padding:0px 8px"><a href="http://www.certego.net/" target="_blank"><img width="96" height="96" src="http://www.certego.net/email/certego.png" alt="" style="border-radius: 0px;"></a></td><td style="text-align:initial;vertical-align:top;padding:4px 0px"><div style="padding-top:2px;color:rgb(0,172,237);font-weight:bold;font-stretch:normal;font-size:18px;line-height:normal;font-family:sans-serif;letter-spacing:1px">Giovanni Vecchi</div><div style="padding-top:2px;color:rgb(32,32,32);font-weight:bold;font-stretch:normal;line-height:normal;font-family:sans-serif">Infrastructure Lead Engineer, Certego</div><div style="padding-top:4px"><a href="tel:+39-059-7353333" style="color:rgb(84,84,84);font-stretch:normal;font-size:12px;line-height:normal;font-family:sans-serif" target="_blank">+39-059-7353333</a><span style="color:rgb(0,172,237);font-stretch:normal;font-size:12px;line-height:normal;font-family:sans-serif"></span></div><div style="padding-top:6px"><a href="http://www.linkedin.com/company/certego" target="_blank"><img width="24" height="24" src="http://www.certego.net/email/linkedin.png" style="border-radius: 0px; border: 0px; width: 24px; min-height: 24px;"></a> <a href="http://twitter.com/Certego_IRT" target="_blank"><img width="24" height="24" src="http://www.certego.net/email/twitter.png" style="border-radius: 0px; border: 0px; width: 24px; min-height: 24px;"></a> <a href="http://github.com/certego" target="_blank"><img width="24" height="24" src="http://www.certego.net/email/github.png" style="border-radius: 0px; border: 0px; width: 24px; min-height: 24px;"></a> <a href="http://www.youtube.com/CERTEGOsrl" target="_blank"><img width="24" height="24" src="http://www.certego.net/email/youtube.png" style="border-radius: 0px; border: 0px; width: 24px; min-height: 24px;"></a> <a href="http://plus.google.com/117641917176532015312" target="_blank"><img width="24" height="24" src="http://www.certego.net/email/googleplus.png" style="border-radius: 0px; border: 0px; width: 24px; min-height: 24px;"></a></div></td></tr></tbody></table></td></tr></tbody></table><div style="font-stretch:normal;font-size:8px;line-height:normal;font-family:sans-serif;white-space:normal;width:420px;text-align:justify;vertical-align:top;padding:8px 0px;color:rgb(224,224,224)">Use of the information within this document constitutes acceptance for use in an "as is" condition. There are no warranties with regard to this information; Certego has verified the data as thoroughly as possible. Any use of this information lies within the user's responsibility. In no event shall Certego be liable for any consequences or damages, including direct, indirect, incidental, consequential, loss of business profits or special damages, arising out of or in connection with the use or spread of this information.</div></pre></div></div></div></div>