Logs from the DNS, DHCP and Admin portal are shipped to the MoJ Operation Security Team.
The cloudwatch log subscriptions are managed in the logging infrastructure repository.
The logs that are shipped include:
- Admin Portal
- KEA Primary server logs
- KEA Standby server logs
- KEA API server logs
Log levels are set to INFO in production and can be managed through the admin portal here:
Setting these log levels to debug will generate a large volume of log data and may impact the performance of the DHCP and DNS servers.