syslog install centos

yum install syslog-ng
systemctl enable syslog-ng
systemctl start syslog-ng

yum erase rsyslog


systemctl restart syslog-ng

netstat -antup | grep 514

firewall-cmd --permanent --zone=public --add-port=514/tcp
firewall-cmd --permanent --zone=public --add-port=514/udp
firewall-cmd --reload

# UBNT USG
## enable dns logging
configure
set service dns forwarding options 'log-queries'
set service dns forwarding options log-queries=extra
# delete service dns forwarding options log-queries=extra
commit
save

sudo service dnsmasq restart

https://nmaggioni.xyz/2018/02/17/Logging-DNS-queries-on-your-EdgeRouter/
https://community.ubnt.com/t5/EdgeRouter/Log-DNS-query-to-syslog/td-p/1215385