Re: Syslog and facilities
"David Corlette" <[email protected]>
| Newsgroups | gmane.comp.sysutils.loganalysis |
|---|---|
| Message-ID | <[email protected]> |
Hello, It's really just a classification scheme - mail programs are *supposed* to log to facility "mail", news to "news" etc - but not all apps do that correctly. The idea is that then you can use the facility to filter the data as necessary or redirect to separate logs (e.g. a log just for mail) as you desire. >>> On Wed, Jun 6, 2007 at 4:55 AM, in message <[email protected]>, "saudi sans" <[email protected]> wrote: > Syslog has facilities and levels. > > What is the "facility" in syslog ? The level concept is pretty intuitive. > > As I understand "facility" field contains the source-program which > generated the log entry . > > I have a central syslog server where I am aggregating logs from > several cisco routers and Unix machines. > > I have given Level7 as my facility in all cisco routers and Level4 for all > Unix > > If I am collecting logs remotely does the "facility" field contain > anything meaningful? Does it make any difference to the log generation > ? Does it matter if I set Level4 or LevelX? > _______________________________________________ > LogAnalysis mailing list > [email protected] > http://www.loganalysis.org/mailman/listinfo/loganalysis