Chapter 10. Customizing BIND logging

Procedure

1. Open the ipa-logging-ext.conf file in the /etc/named/ directory and add or modify a logging channel with your file path:

   logging {
   	channel ipa_custom_log {
           file "/var/log/named/ipa_dns_queries.log" versions 3 size 10m;
       	severity info;
       	print-time yes;
       	print-severity yes;
       	print-category yes;
   	};
   
   	category queries { ipa_custom_log; };
   	category update { ipa_custom_log; };
   	category update-security { ipa_custom_log; };
   };

2. Restart the BIND server:

   # systemctl restart named

Procedure

1. Create a log directory:

   # mkdir -p /var/log/named
   # chown named:named /var/log/named
   # chmod 750 /var/log/named

2. Assign the named_log_t SELinux context to the new directory and the log file:

   # semanage fcontext -a -t named_log_t "/var/log/named(/.*)?"
   # restorecon -Rv /var/log/named

3. Restart the BIND server:

   # systemctl restart named