Syslog facilities
Following is a list of the syslog facility names from RFC 3164 (in mixed case) and RFC 5427 (in lowercase) with their meanings. In BMC AMI Defender you might specify facilities using either of the RFC names (in upper, lower or mixed case). You might abbreviate the RFC 3164 forms to the part shown in upper case; you might abbreviate the RFC 5427 names that are longer than four characters to their first four characters, with the exception of cron2 and the localn names, that must be specified in full.
As specified for BMC AMI Defender or CZASEND | Description from | Syslog code | Usage by BMC AMI Defender and CZASEND |
|---|---|---|---|
KERNel | kernel messages | 0 | SMF 7, SMF 90 |
USER | user-level messages | 1 | CZASEND |
MAIL | mail system | 2 |
|
SYSTem | system daemons | 3 | SMF 30 |
SECURITY4 | security/authorization messages1 | 4 | SMF 80; SMF ACF2; SMF TSS80 |
SYSLOGd | messages generated internally by syslogd | 5 | zDefender internal messages; SMF DIAG |
PRINTER | line printer subsystem | 6 |
|
NEWS | network news subsystem | 7 |
|
UUCP | UUCP subsystem | 8 | SMF 119 |
CLOCK9 | clock daemon2 | 9 |
|
SECURITY10 | security/authorization messages1 | 10 |
|
FTP | FTP daemon | 11 |
|
NTP | NTP subsystem | 12 |
|
LOGAUdit | log audit1 | 13 | SMF DB2 |
LOGALert | log alert1 | 14 | SMF events except as otherwise indicated |
CLOCK15 | clock daemon2 | 15 |
|
LOCAL0 | local use 0 (local0) | 16 | SMF 110 |
LOCAL1 | local use 1 (local1) | 17 | IND$FILE audit |
LOCAL2 | local use 2 (local2) | 18 | MicroFocus ChangeMan |
LOCAL3 | local use 3 (local3) | 19 | LSPACE |
LOCAL4 | local use 4 (local4) | 20 | CONSOLE |
LOCAL5 | local use 5 (local5) | 21 | MQ SMF 115 and 116 |
LOCAL6 | local use 6 (local6) | 22 |
|
LOCAL7 | local use 7 (local7) | 23 |
|
1 Various syslog message generating devices utilize Facilities 4, 10, 13, and 14 for security/authorization, audit, and alert messages.
2 Various syslog message generating devices utilize both Facilities 9 and 15 for clock (cron/at) messages.
Related topic