Export DNS and/or traffic logs

Follow

Michael Dean

• December 04, 2022 23:24

Is there anyway to automatically export/stream the firewall and DNS logs? I would like to setup a Splunk/ELK logging system to record the information.

TIA,

Mike

1

• 

  Michael Bierman

  • December 05, 2022 04:03

  You can use syslog to send info to any syslog server. 
  
  gist.github.com/mbierman/f3d184b65e0f4de6fa75a4a5d5145426

  1

  Comment actions Permalink
• 

  Michael Dean

  • December 05, 2022 14:43

  Thanks!

  0

  Comment actions Permalink
• 

  Michael Dean

  • December 07, 2022 14:36

  Thanks again for the syslog info. Unfortunately, the DNS logs (requests / responses) are not going to syslog. I found the dnsmasq and dns-crypt configurations, but have not modified any of the logging output yet. Before I do that, has anyone else modified the configs to output logs? I'm being cautious so I don't blow up my connection :-)

  TIA

  0

  Comment actions Permalink

Please sign in to leave a comment.