Documentation

facility

This specifies the name of the system that is logging the syslog message. The facility attribute is defined as a string. The way that a message is handled may differ depending on the facility. Each of these facilities help in organizing and routing syslog messages based on their source.

Usually non operating system processes, like Radiator are in the facility local0 to local7.

Available facilities

Facility keywords in syslog are defined as strings. Each facility has a corresponding numerical code. The possible values with their corresponding facility codes are:

  • kern (0): Kernel messages
  • user (1): User-level messages
  • mail (2): Mail system
  • daemon (3): System daemons
  • auth (4): Security/authentication messages
  • syslog (5): Messages generated internally by syslog
  • lpr (6): Line printer subsystem
  • news (7): Network news subsystem
  • uucp (8): UUCP subsystem
  • cron (9): Cron subsystem
  • authpriv (10): Security/authentication messages
  • ftp (11): FTP daemon
  • ntp (12): NTP subsystem
  • security (13): Log audit
  • console (14): Log alert
  • solaris-cron (15): Scheduling daemon
  • local0 (16): Locally used facility 0
  • local1 (17): Locally used facility 1
  • local2 (18): Locally used facility 2
  • local3 (19): Locally used facility 3
  • local4 (20): Locally used facility 4
  • local5 (21): Locally used facility 5
  • local6 (22): Locally used facility 6
  • local7 (23): Locally used facility 7

Note that the mapping between facility codes and keywords is not uniform across different operating systems and syslog implementations. For additional information, refer to your operating system documentation.

Navigation
Parents