On Tue, 16 Mar 2021 at 15:10, Robert Edmonds <edmonds(a)debian.org> wrote:
 Matthew Pounsett wrote:
  Just to be absolutely sure the config is default,
I purged syslog-ng
 and then autoremove-purged its dependencies, then reinstalled.  Still
 nothing in /var/log/user.log from knot.  I also tried removing the
 default filter on user.debug just to be safe, still nothing. 
 Hmm, how about /var/log/daemon.log? I don't think I've ever seen knotd
 log to /var/log/user.log. 
Possibly due to the reinstall, I'm seeing configuration checks ('knotc
reload' output) in daemon.log now.
On the rsyslog-based system, I'm getting at least all of the DNSSEC
signing logs to /var/log/user.log.  I'm not seeing that DNSSEC
activity logged anywhere on the syslog-ng system.  It only shows up
via journalctl queries.