[Pdns-users] Logging to /var/log/messages
Ian Goldstein (BLOOMBERG/ 120 PARK)
igoldstein5 at bloomberg.net
Thu Sep 14 14:51:51 UTC 2023
Thank you Brian... The host was a typo, they are the same host.
The output from journalctl is more confusing to me and imho the crux of the problem.
Why is journalctl showing 2 log entries 1 for pdns_server and one for pdns (both with the same pid).
journalctl -u pdns --no-pager | tail -2
Sep 14 10:49:01 xxxxxx-209 pdns: AXFR of domain 'foo.bar.com' to 126.96.36.199 finished
Sep 14 10:49:01 xxxxxx-209 pdns_server: AXFR of domain 'foo.bar.com' to 188.8.131.52 finished
I would not think that would be an rsyslog issue.
From: b.candler at pobox.com At: 09/14/23 10:44:05 UTC-4:00To: Ian Goldstein (BLOOMBERG/ 120 PARK ) , pdns-users at mailman.powerdns.com
Subject: Re: [Pdns-users] Logging to /var/log/messages
On 14/09/2023 15:32, Ian Goldstein (BLOOMBERG/ 120 PARK) wrote:
The log entry that appears in my pdns.log is:
Sep 14 09:07:52 xxxxxx-232 pdns: AXFR of domain 'foo.bar.com' to 184.108.40.206 finished
The entry that appears in /var/log/messages:
Sep 14 09:26:30 xxxxxx-209 pdns_server: AXFR of domain 'foo.bar.com' initiated by 220.127.116.11
also, the output from journalctl shows 2 entries
Sep 14 10:22:41 xxxxxx-209 pdns_server: AXFR of domain 'foo.bar.com' to 18.104.22.168finished
Sep 14 10:22:41 xxxxxx-209 pdns: AXFR of domain 'foo.bar.com' to 22.214.171.124 finished
xxxxxx-232 and xxxxxx-209 appear to be two different hostnames, and you might want to check why one is running "pdns", one is running "pdns_server", and some logs show the PID and some don't. Basically those logs are too obfuscated to be meaningful.
journalctl is going to show the logs which are coming directly from powerdns on stdout/stderr.
Apart from that, I think you'd be better off asking your question on an rsyslog mailing list, since powerdns has no control over how rsyslog processes or writes logs.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Pdns-users