What Query Log to check when you have 2 x AGH servers running

[iptvcld]

I currently have 2 DNS (AGH) running and each of my devices have both DNS servers configured (DNS 1, DNS 2).

When a site is being blocked and I want to allow it on network, I always have to guess which DNS server its on. For example, I go to search the query log on DNS 1 and there no mention of that blocked site and then when i check DNS 2, i can see the client and site hit that DNS server.

Issue is now, if i unblock that site from DNS 2 then once my DNS sync occurs, it will be over written as DNS 1 does not have that unblock (the change was made on DNS 2).

Should I be able to see all the blocks and activity from DNS server 1?

Thank you,

[Dynamic5912]

I currently have 2 DNS (AGH) running and each of my devices have both DNS servers configured (DNS 1, DNS 2).

When a site is being blocked and I want to allow it on network, I always have to guess which DNS server its on. For example, I go to search the query log on DNS 1 and there no mention of that blocked site and then when i check DNS 2, i can see the client and site hit that DNS server.

Issue is now, if i unblock that site from DNS 2 then once my DNS sync occurs, it will be over written as DNS 1 does not have that unblock (the change was made on DNS 2).

Should I be able to see all the blocks and activity from DNS server 1?

Thank you,

Why are you running 2 AGH instance simultaneously?

[iptvcld]

And this is where the issue is, in a multi dns setup, there should be an option to view logs from one place and not having to log into multiple servers to find the query log info I am after.

[Dynamic5912]

And this is where the issue is, in a multi dns setup, there should be an option to view logs from one place and not having to log into multiple servers to find the query log info I am after.

But AGH doesn't support multiple servers and cross-instance syncing.

It's done by a third-party.

Again, not AGH's problem or issue to fix.

[iptvcld]

Again, not talking about sync. Let’s not confuse the ask with this.

But if AGH does not support multi instances then that’s different.. and really should be something that’s looked into as it’s a common setup to have more than one DNS server in an environment for redundancy and the logs for all instances should be in one location instead of guessing what server the client is being served from.

I will leave this open in case others have any suggestions or idea to share.

[Dynamic5912]

Again, not talking about sync. Let’s not confuse the ask with this.

But if AGH does not support multi instances then that’s different.. and really should be something that’s looked into as it’s a common setup to have more than one DNS server in an environment for redundancy and the logs for all instances should be in one location instead of guessing what server the client is being served from.

I will leave this open in case others have any suggestions or idea to share.

It's called AdGuard HOME.

Not AdGuard Business or Enterprise.

An everyday home user will have one instance setup.

You're asking for/expecting something that isn't on the radar for the everyday home user.

[iptvcld]

It’s also common for a home user to have multi dns setup. Always good to have redundant services no matter at home or enterprise. It’s just good practice.

[iptvcld]

[Dynamic5912]

That's not supported nor a feature that's in-demand or widely requested.

[iptvcld]

My company has 4 DNS servers. There is no way they are checking each of the 4 servers one at a time to review logs for a client that let’s say is using dns 3.

[Dynamic5912]

My company has 4 DNS servers. There is no way they are checking each of the 4 servers one at a time to review logs for a client that let’s say is using dns 3.

That's fine for your company.

This isn't AGH's issue to fix.

[iptvcld]

I was asking what others are doing for this type of setup. But it turned into a lesson on how dns services should be set up.

[Dynamic5912]

I was asking what others are doing for this type of setup. But it turned into a lesson on how dns services should be set up.

You're using a third-party sync tool. No one here can help with that.

Logs on AGH server 1 are kept on AGH1.

Likewise for the other servers that are logged on their respective logs.

[he-pennypacker]

Completely agree that this is not AGH's issue to fix, however others have come up with a similar need and developed solutions such as this to keep multiple instances in sync:

https://github.com/bakito/adguardhome-sync

@iptvcld this could suit your purposes?

[iptvcld]

It’s not a matter of keeping two instances in sync..

When running multiple dns servers, the endpoint will randomly pick a dns server to query and if you want to allow a blocked query for an endpoint, it’s always a guessing game to first determine which dns server is the endpoint on. Then once you check both servers you will discover where to add the allow on.

There should be a better way to viewing the logs instead of checking multiple servers when people have multi dns servers setup.

This is not a sync issue I am bringing up..