[dns-operations] Logging dns record changes

Mike Hoskins (michoski) michoski at cisco.com
Fri Nov 14 16:52:47 UTC 2014


-----Original Message-----
From: "Ayca Taskin   (Garanti Teknoloji)" <AycaTa at garanti.com.tr>
Date: Friday, November 14, 2014 at 10:07 AM
To: "dns-operations at dns-oarc.net" <dns-operations at dns-oarc.net>
Subject: [dns-operations]  Logging dns record changes

>
>Hello All,
>
>We need to log DNS record changes, is there any logging option to do this
>on  9.9.1-P3?
>
>Thanks and Regards

You can certainly do that in BIND.  Check out the logging section of the
ARM:

http://www.isc.org/downloads/bind/doc/bind-9-10/

Or this:

http://www.zytrax.com/books/dns/ch7/logging.html

Exact config would depend on your requirements, but this will get you
started:

logging {
	channel updates {
		file "/var/log/update.log" versions 3 size 10m;
		print-time yes;
		print-category yes;
		severity info; // might want to adjust this...
	};

...

	category update { updates; };
	category update-security { updates; };

...

};


PS: This is probably better for bind-users.





More information about the dns-operations mailing list