Log parameter

You can specify in the properties file under ans.events.properties which events should be logged. The following table shows the events that can be logged. If you want to enter multiple events, you must separate them with a comma.

Example:

ans.events.log = dnssec/became-secure, dnssec/zsk-reminder, zone/deleted

Views

A view represents a collection of content. The default value of the view is set to "default" and cannot be changed.

EventDescription

dnssec/became-insecure

Sends an event when a previously safe zone has completed the transition to uncertainty. I.e. Dnssec has been deactivated.

  • view: The view containing this zone.
  • zone: The name of the zone.

dnssec/became-secure

Sends an event when a previously unsafe zone has completed signing and publishing the signed zone. This event lets you know that you can now add a DS RR to the parent zone.

  • view: The view that contains this zone.
  • zone: The name of the zone.
  • ds: A list of DS records that correspond to the new KSKs.

dnssec/faulted

Sends an event when the server detects a severe error in the zone.

  • view: The view that contains this zone.
  • zone: The zone where the error occurred.
  • reason: The reason for the error.

dnssec/new-signatures

Sends an event when new signatures are published for the content of the zone. This event is useful if you want to perform validation tests for a zone.

  • view: The view that contains this zone.
  • zone: The name of the zone.

dnssec/ksk-reminder

Sends an event when your KSK signatures are about to expire.

  • view: The view that contains this zone.
  • zone: The name of the zone.
  • Reference time: Time in which the KSK signatures in the current DNSSEC package are set to "expired".

If you do not take action, the validators will no longer be able to validate the zone data.

dnssec/zsk-reminder

Sends an event when your ZSK signatures are about to expire.

  • View: The view that contains this zone.
  • zone: The name of the zone.
  • Reference time: The time in which the ZSK signatures in the current DNSSEC package are set to expire.

If you do not take action, the validators will no longer be able to validate the zone data.

update/not-auth

Sends events for all update operations for zones that the server is not authoritative for.

  • client: The address and port of the client.
  • view: The view that contains the updated zone.
  • zone: The updated zone.

update/refused

Sends events for all rejected dynamic updates. Denied updates are those updates that are denied by the update authorization policy.

  • client: The address and port of the client.
  • view: The view containing the updated zone.
  • zone: The updated zone.
  • identity: The identity of the client that is performing the update.

update/success

Sends events for all successful dynamic updates.

  • client: The address and port of the client.
  • details: A list of strings that describe the changes requested by the update.
  • view: The view that contains the updated zone.
  • zone: The updated zone.
  • identity: The identity of the client performing the update.
  • version: The database version number of the zone that will be updated when the update is complete.

xfr-out/granted

Sends events when a request for zone transfer is granted.

  • client: The address and port of the client.
  • view: The view containing the transferred zone.
  • zone: The transferred zone.

xfr-out/denied

Sends events when a request for zone transfer is denied.

  • client: The address and port of the client.
  • view: The view containing the transferred zone.
  • zone: The zone to transfer.
  • detail: additional information about the reason for the rejection.

zone/added

Sends events when a Zone is added to a view.

  • view: The view that contains the added zone.
  • zone: The added zone.
  • db: The database to which the zone is added.
  • zone type: The zone type.

zone/deleted

Sends events when a zone is deleted from a view.

  • view: The view containing the deleted zone.
  • zone: The deleted zone.
  • db: The database from which the zone was deleted.
  • zone-type: The zone type.

zone/modified

Sends events whenever a zone is modified.

  • view: The view that contains the modified zone.
  • zone: The modified zone.
  • db: The database that contains the modified zone.
  • zone-type: The type of the modified zone.
  • content-changed: If present, it indicates that the change affected the content of the zone.
  • configuration-changed: If present, it indicates that the change was made to the configuration of the zone.

zone-maintenance/failure

Sends an event when a zone transfer fails for a zone that needed to be updated.

  • view: The view containing the retained zone.
  • zone: The zone is retained.
  • status: The current status of the zone.
  • master: The address of the server from which the content is retrieved.
  • detail: Information about the cause of the failure.