Syslog facilities and severities - Documentation for BMC AMI Defender for Db2 6.1

Syslog facilities and severities are transmitted in a single field that RFC 3164 refers to as the PRI (priority) and that is the first field of the message.

The priority is calculated using the following syntax:
(facilityCode x 8) + severityCode = priority

The priority value is enclosed in angle brackets.

Example

Using the values from the following tables, the priority of a system daemon (syslog code = 3) with a warning (severity code = 4) is calculated as follows:

(3 x 8) + 4 = 28

The priority is enclosed in angle brackets:

<28>Oct 11 22:14:15 LPARB …

Syslog facilities

The following table lists the syslog facility names from RFC 3164 (in mixed case) and RFC 5427 (in lowercase) with their meanings. In BMC AMI Defender, you can specify facilities using either of the RFC names (in upper, lower or mixed case) and use the following abbreviations:

• Abbreviate RFC 3164 forms to the part shown in upper case.
• Abbreviate RFC 5427 names that are longer than four characters to their first four characters, except for cron2 and localn names, which you must write out fully.

^{1 Various syslog message generating devices utilize facilities 4, 10, 13, and 14 for security/authorization, audit, and alert messages.}

^{2 Various syslog message generating devices utilize both facilities 9 and 15 for clock (cron/at) messages.}