[LogReport Questions] Does the bind9 reports work?

[x_logreport-questions_x at nospam.pz.podzone.net]

> If you want to do some meaningful reporting on other log file entries,
> like for instance 'security', you will also need to define what kind of
> things you would like to report about these lines (i.e. report formats
> etc.). Other interesting events besides security could be notify, xfer-in,
> xfer-out and lame-servers I guess.
> 
> Anyone interested in looking into this?

Not sure I can contribute any development effort, but I could probably
be help with testing.  These features would be useful to me.

I should also probably write up some notes on using lire to log bind
queries, as there was some fiddling required to make it work well with
rotated logs.  Afaik, bind itself will only rotate query logs based on
file size whereas lire wants weekly logs so I had to employ logrotate.

End result - from a default Debian install, several files to
edit/create rather than a simple addition to the bind config, but
unfortunately I did not keep notes at the time.  Bug me for this if
you want it.

Cheers,
-bernie.