This presentation describes methods for saving and parsing DNS logs from Windows servers. None of the methods made available by Microsoft in Windows servers are completely acceptable.
The .zip file contains sample logs and scripts for Windows Debug logs, Detailed Debug logs, and Windows Server 2012+ Event logs