Turns out you can shell out from the config file by using backticks.
I think I was able to figure this one out by now.
Apparently BIND does not know about the security syslog facility! Because of that, it kept logging with the default daemon facility and my syslog config did suppress these messages.
See "7.5.1. The Logging Statement" on https://docstore.mik.ua/orelly/networking_2ndEd/dns/ch07_05.htm where security is not ...
FWIW: I've develop a command line tool upon zlib's zran.c source code which creates indexes for gzip files: https://github.com/circulosmeos/gztool
It can make a continous tail of a gzip file with -T option. Or just a tail of last contents and stop, with -t (Many other options available).
Note that for any of these actions gztool will create an index file ...
To log the full request uri you can change your log_format inside of the http block.
Change it to:
log_format main '$remote_addr - $remote_user [$time_local] "$host$request_uri" '
'$status $body_bytes_sent "$http_referer" '
126.96.36.199 - - [02/Aug/2019:...