BIND: Collecting Statistics and Logging

Updated: Sep 23, 2026

 
mkdir -p /var/named/logs /var/named/stats
chown bind:bind /var/named/logs /var/named/stats
vi /etc/named.conf
 

 
// vim: set filetype=named :

key "srv-rndc-key" { 
	algorithm hmac-sha512; 
	secret "9ZkhaRf7FoyNLmkzUJiJxnmBdG0WSJDqUYQBn85X/Jp7eX6CHUBvdccpXsn4L0rroCmbcfROuL+QmV/9tz/0uQ=="; 
	};

controls { inet 127.0.0.1 port 953 allow { 127.0.0.1; } keys { "srv-rndc-key"; }; };
statistics-channels { inet * port 9053 allow { any; }; };

options {
	directory "/var/named";
	pid-file "/var/run/named/pid";

	recursion yes;
//	allow-recursion { localnets; localhost; };
	allow-recursion { any; };
	recursive-clients 1000;

	empty-zones-enable yes;

	dump-file "stats/named_dump.txt";
	zone-statistics full;
	statistics-file "stats/named_stats.txt";
	memstatistics yes;
	memstatistics-file "stats/named_memstats.txt";

	querylog yes;
	responselog yes;

};


logging {
	channel default {
		file "/var/named/logs/named.log" versions 10 size 10m ;
		print-time yes;
		print-category yes;
		severity dynamic;
	};
	channel "query" {
		file "/var/named/logs/query.log" versions 10 size 10m ;
		print-time yes;
		print-category yes;
	};
	channel "rpz" {
		file "/var/named/logs/rpz.log" versions 10 size 10m ;
		print-time yes;
		print-category yes;
	};
	channel "transfer" {
		file "/var/named/logs/transfer.log" versions 10 size 10m ;
		print-time yes;
		print-category yes;
	};
	channel "update" {
		file "/var/named/logs/update.log" versions 10 size 10m ;
		print-time yes;
		print-category yes;
	};


	category default { default; };

	category queries { query; };
	category query-errors { query; };
	category serve-stale { query; };
	category responses {query;};

	category lame-servers {null;};

	category resolver {rpz;};
	category rpz {rpz;};
	category rpz-passthru {rpz;};

	category notify { transfer; };
	category zoneload { transfer; };
	category xfer-in { transfer; };
	category xfer-out { transfer; };

	category update { update; };
	category update-security { update; };

};

zone "." { type hint; file "/var/named/named.root"; };
 

 
/usr/local/etc/rc.d/named restart
(service named restart)

rndc status

dig -4 @127.0.0.1 -t soa google.com

cd /var/named/logs