How to log verbose details about DNS update queries in bind

Is there any way to log failed DNS update queries with Bind 9 (9.16.22 on Debian) in a more verbose format?

I tried all logging categories and found update messages in an update-security one. But messages are quite brief, like update forwarding 'domain.tld/IN' denied.

I would like to get verbose message, like update forwarding 'domain.tld/IN', add foo.domain.tld 600 IN A 10.10.10.10 denied.

BIND's logging differentiates categories, and for each category you can set a set of channels to send messages to. For each channel you set a logging verbosity and other behaviour.

For example, you can have a dedicated channel verbose_updates, where you'll log a category update:

logging {
...
  channel verbose_updates {
    file "/var/log/bind/update.log";
    severity debug 3;
    print-time yes;
  };
  category update {
    verbose_updates; # other channels can go here, if you want to also have updates logged elsewhere in more typical form
  };
...
};

This way you can have a quite verbose debug log just for updates.

Read ISC BIND documentation for reference.