Data Export
The Logs export service allows the export of DNS Proxy browsing logs. The browsing logs are compressed into files with the extension .tar.gz and sent every 5 minutes by ISP-type DNS Proxies and every hour by DNS Proxies with Active Directory. If the file is not transferred, it remains pending and is transferred at the next execution. In case the same remote host is configured on two or more DNS proxies. To avoid file conflict problems, one of the following options should be chosen: - configure on the DNS Proxy a unique hostname for each device; - configure multiple destination folders in the Data Export, one for each DNS Proxy. Note: - Untransferred files remain in pending status for up to 2 days, but in the case of 95% occupied disk space, all pending files are deleted. - The date entered in the logs is set with Timezone BST. - The file name will be in the format: bind-HOST_NAME-YYYYMMDDHHMMSS.tar.gz Where HOST_NAME is the machine name, YYYYMMDDHHMMSS is the timestamp of the file creation (e.g., bind-dns_proxy_test-20231002101500.tar.gz). To manage the service access the admin panel in [A] - Advanced configuration " [L] - Logs export.
1. Access theLogs export menu
2. Activate the service by typingy and pressing ENTER.
3. Sending mode : enter the file sending mode and press ENTER:
- SFTP supports password and public key authentication methods
- SCP supports only public key authentication methods
4.Remote host: enter the domain or IP of the host on which to send data
5. Remote port: enter the port of the host on which to send data
6. Username: enter the user enabled to send
7. Login mode: enter the authentication mode:
- password for user and password authentication, available in SFTP sending mode - sshkey for public key authentication.
In this case, it is necessary to copy the key of the DNS proxy to the target host destination, see Menu Logs export » View local SSH Key.
8. Only if Login mode = password, Enter password: enter the login password for the remote host.
9.Remote path : enter the destination path to the files.
10. Confirm the configuration by typing y and pressing ENTER.
11. On the next screen:
If sshkey access mode was selected, type y and press ENTER to display the local SSH key to be entered into the target host. You can also view the key later via the Logs export menu Menu Logs export » View local SSH Key. If password access mode was selected type y and press ENTER to proceed to test sending a file.
It is also possible to test file sending at a later time via Menu Logs export » Test export
If the service is active the saved configuration is shown, type y and press ENTER to access the Logs export service management
If the service is not active you are asked to activate the service, type y and press ENTER to proceed to activation.
Example active service configuration:
Service management menu:
Access the menu to disable the Logs export service.
- Access the [D] - Disable service menu.
- Type y and press ENTER to confirm the deactivation.
Access the menu to change the configuration of the Logs Export service.
Notes: this screen is also shown when reactivating the service. Values in square brackets are those previously configured, press ENTER to confirm the previous value:
- Access the [C] - Change configuration menu.
- Sending mode: enter the file sending mode and press ENTER:
- SFTP supports password and public key authentication methods
- SCP supports only public key authentication methods
- Remote host: enter the domain or IP of the host on which to send data.
- Remote port: enter the port of the host on which to send data.
- Username: enter the user enabled to send.
- Login mode: enter the authentication mode:
- password for user and password authentication, available in SFTP sending mode;
- sshkey for public key authentication. In this case, it is necessary to copy the key of the DNS proxy to the target host destination, see Menu Logs export » View local SSH Key
- Only if Login mode = password, Enter password: enter the login password for the remote host.
- Remote path: enter the destination path to the files.
- Confirm the configuration by typing y and pressing ENTER
- On the next screen, type y and press ENTER to proceed to test sending a file.
It is also possible to test file sending at a later time via the menu Menu Logs export » Test export.
Access the menu to view the local SSH key. Notes: this menu is not displayed if SFTP sending mode with user and password authentication method has been chosen: 1. Access the menu V View local SSH Key 2. The screen shows the local SSH key as per the example below:
To authorize access to the SFTP host, it is necessary to:
- select the text;
- copy it;
- paste it into the authorized_keys file of the SFTP host on the configured user e.g. on Linux with user user_export the file path could be /home/user_export/.ssh/authorized_keys.
- Permit ENTER to return to the Logs export menu.
Access the menu to perform the export of a test file.
The file will be named with export-SYSTEMNAME_DNSPROXY.txt and exported to the configured destination folder:
- Access the [T] - Test export menu.
- Type y and press ENTER to send the file. (Wait for the procedure to run).
- Test result:
- If the file was exported, the message File exported is displayed successfully!
- If errors were encountered, the message ERROR: Unable to export file and any error log are displayed.
4. Permit ENTER to return to the Logs export menu.
Other ways to ask: » Configure on the DNS Proxy a unique hostname for each device. » Configure multiple destination folders in the Data Export.
