[Pdns-users] Logging to /var/log/messages

[Brian Candler]

On 14/09/2023 15:32, Ian Goldstein (BLOOMBERG/ 120 PARK) wrote:
> The log entry that appears in my pdns.log is:
> Sep 14 09:07:52 xxxxxx-232 pdns[1380]: AXFR of domain 'foo.bar.com' to 
> 1.2.3.4 finished
>
> The entry that appears in /var/log/messages:
> Sep 14 09:26:30 xxxxxx-209 pdns_server: AXFR of domain 'foo.bar.com' 
> initiated by 1.2.3.4
>
> also, the output from journalctl shows 2 entries
> Sep 14 10:22:41 xxxxxx-209 pdns_server[98865]: AXFR of domain 
> 'foo.bar.com' to 1.2.3.4finished
> Sep 14 10:22:41 xxxxxx-209 pdns[98865]: AXFR of domain 'foo.bar.com' 
> to 1.2.3.4 finished

xxxxxx-232 and xxxxxx-209 appear to be two different hostnames, and you 
might want to check why one is running "pdns", one is running 
"pdns_server", and some logs show the PID and some don't. Basically 
those logs are too obfuscated to be meaningful. 
<https://blog.powerdns.com/2016/01/18/open-source-support-out-in-the-open>

journalctl is going to show the logs which are coming directly from 
powerdns on stdout/stderr.

Apart from that, I think you'd be better off asking your question on an 
rsyslog mailing list, since powerdns has no control over how rsyslog 
processes or writes logs.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20230914/29bd1a24/attachment.htm>