Chapter 11. Customizing BIND logging

Procedure

1. Open the ipa-logging-ext.conf file in the /etc/named/ directory and add or modify a logging channel with your file path:

   logging {
   channel ipa_custom_log {
   file "/var/log/named/ipa_dns_queries.log" versions 3 size 10m;
   severity info;
   print-time yes;
   print-severity yes;
   print-category yes;
   };
   
   category queries { ipa_custom_log; };
   category update { ipa_custom_log; };
   category update-security { ipa_custom_log; };
   };

2. Restart the BIND server:

   # systemctl restart named

Procedure

1. Create a log directory:

   # mkdir -p /var/log/named

   # chown named:named /var/log/named

   # chmod 750 /var/log/named

2. Assign the named_log_t SELinux context to the new directory and the log file:

   # semanage fcontext -a -t named_log_t "/var/log/named(/.*)?"

   # restorecon -Rv /var/log/named

3. Restart the BIND server:

   # systemctl restart named