logging.facility

facility

This specifies the source category of the syslog message. Configure the facility with an unquoted keyword or its RFC 5424 numeric code. Quoted keywords remain supported for compatibility with existing configurations. The way that a message is handled may differ depending on the facility. Each facility helps organize and route syslog messages based on its source.

Usually non operating system processes, like Radiator are in the facility local0 to local7.

Available facilities

Each facility keyword has a corresponding numerical code. The possible values are:

• kern (0): Kernel messages
• user (1): User-level messages
• mail (2): Mail system
• daemon (3): System daemons
• auth (4): Security/authentication messages
• syslog (5): Messages generated internally by syslog
• lpr (6): Line printer subsystem
• news (7): Network news subsystem
• uucp (8): UUCP subsystem
• cron (9): Cron subsystem
• authpriv (10): Security/authentication messages
• ftp (11): FTP daemon
• ntp (12): NTP subsystem
• audit (13): Log audit. The compatibility name security is also accepted.
• alert (14): Log alert. The compatibility name console is also accepted.
• clock_daemon (15): Clock daemon. The compatibility name solaris-cron is also accepted.
• local0 (16): Locally used facility 0
• local1 (17): Locally used facility 1
• local2 (18): Locally used facility 2
• local3 (19): Locally used facility 3
• local4 (20): Locally used facility 4
• local5 (21): Locally used facility 5
• local6 (22): Locally used facility 6
• local7 (23): Locally used facility 7

Note that the mapping between facility codes and keywords is not uniform across different operating systems and syslog implementations. For additional information, refer to your operating system documentation.

For example, these select the same facility:

facility local0;
facility 16;