Is dnssec working?

At this level of verbosity, why do you want a separate log? It is easy enough to add the few entries (maybe a few dozen a day max) that will be generated to the system log, and that log will automatically rotate daily. You can find the unbound entries in there with a grep.