[Pdns-users] PowerDNS Authoritative 4.6.2, how to log served responses (i.e. NOERROR, NXDOMAIN, SERVFAIL, etc)?
klaus.darilion at nic.at
Tue Jun 14 18:10:20 UTC 2022
Recently we had a similar requirement for our resolvers (which only do query logging, not response logging) and we decided to use packetbeat for this purpose. IT should be easy to integrate if you have an existing Elasic Search cluster!
Von: Pdns-users <pdns-users-bounces at mailman.powerdns.com> Im Auftrag von frank+pdns--- via Pdns-users
Gesendet: Dienstag, 14. Juni 2022 15:23
An: Dmitriy Koff <irishman407 at gmail.com>
Cc: pdns-users-ml <pdns-users at mailman.powerdns.com>
Betreff: Re: [Pdns-users] PowerDNS Authoritative 4.6.2, how to log served responses (i.e. NOERROR, NXDOMAIN, SERVFAIL, etc)?
https://doc.powerdns.com/authoritative/settings.html#log-dns-queries states that it logs "all incoming DNS queries", not the results.
If you want to log the results, you'll need to either increase the loglevel, tcpdump the results and parse those, or add something in front of the server (eg dnsdist) where you'd capture the result codes and log.
On 14 Jun 2022, at 13:38, Dmitriy Koff via Pdns-users <pdns-users at mailman.powerdns.com<mailto:pdns-users at mailman.powerdns.com>> wrote:
I'm trying to configure log for PowerDNS (4.6.2) and cannot figure how to log served responses (i.e. NOERROR, NXDOMAIN, SERVFAIL, etc)
/etc/pdns/pdns.conf (parameters regarding logs)
# nslookup example.com<http://example.com/> 127.0.0.1
** server can't find example.com<http://example.com/>: NXDOMAIN
All i've got in log is packetcache status of request (miss or hit) --
"Remote 127.0.0.1 wants 'example.com<http://example.com/>|A', do = 0, bufsize = 512: packetcache MISS"
Expected something like
"Remote 127.0.0.1 wants 'example.com<http://example.com/>|A', do = 0, bufsize = 512: packetcache MISS, NXDOMAIN"
Thanks in advance.
Pdns-users mailing list
Pdns-users at mailman.powerdns.com<mailto:Pdns-users at mailman.powerdns.com>
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Pdns-users