Log Resolving

W.C.A. Wijngaards wouter at nlnetlabs.nl
Mon Oct 17 09:08:48 UTC 2016


Hi Lorenzo,

Not easily.  You can set verbosity very high (level 5) and parse the
logfile of unbound.  You can see which queries are not answered from
cache, because it will start the iterator for that query.  You can also
see which upstream servers are used to retrieve the information.

Verbosity 2 may also give the information you seek, but much more condensed.

Best regards, Wouter

On 14/10/16 09:52, Lorenzo Mainardi via Unbound-users wrote:
> Hello to everyone,
> 
> Im trying to insert Unbound log into ELK for analytics and attack
> prevention.
> 
> I would like to log if an entry is in cache or not and which resolver
> it’s used (if it’s not cached)
> 
> There is a way to do it?
> 
> Regards
> 
>  
> 
> * *
> 
> *dig**it**el*
> 
>  
> 
> Via della Fortezza 6 - 50129 Firenze
> 
> www.digitelitalia.com <http://www.digitelitalia.com/> - 800 901 669
> 
>  
> 
> Ing. Lorenzo Mainardi//
> 
>  
> 
> Tel +39 055 4624933
> 
> Fax +39 055 4624 947
> 
> lom at digitelitalia.com <mailto:lom at digitelitalia.com>
> 
>  
> 
>  
> 


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20161017/3039e619/attachment.bin>


More information about the Unbound-users mailing list