What are the Syslog Facilities and Levels?
This article applies to all supported versions of MetaDefender Managed File Transfer.
A Syslog facility is a field within a Syslog message that identifies the source or category of the message, such as the kernel, mail system, or a specific application. This functions as a filter that instructs MetaDefender Managed File Transfer to forward only configured events that match the facility to the Syslog server.
These facilities, originally based on Unix processes and daemons, work with (like Emergency, Critical, or Informational) to provide a more comprehensive way to manage and analyze logs in a system or network.
| Numerical Code | Facility | Facility Description |
|---|---|---|
| 0 | kernel Messages | Messages generated by the operating system kernel |
| 1 | User Level Messages | Messages from user-level processes and applications |
| 2 | Mail System | Log entries related to mail servers and email processing |
| 3 | System Daemons | Messages from system daemons or background services |
| 4 | Security or Authorization Messages 1 | Events related to user authentication and authorization, such as login or logout attempts |
| 5 | Internal Messages | Messages generated by the syslog daemon itself |
| 6 | Line Printer Subsystem | Messages concerning the printing system |
| 7 | Network News Subsystem | Log entries related to Usenet news services |
| 8 | UUCP Subsystem | Messages about Unix-to-Unix Copy (UUCP) communication |
| 9 | Clock Daemon 1 | Messages from scheduled tasks or the cron daemon |
| 10 | Security or Authorization Messages 2 | Private authentication-related events, often used for security-sensitive logs |
| 11 | FTP Daemon | Log entries for the FTP (File Transfer Protocol) service |
| 12 | NTP Subsystem | Messages from the Network Time Protocol daemon |
| 13 | Log Audit | General security-related events and authorization failures |
| 14 | Log Alert | Originating process or system component that sent a log message |
| 15 | Clock Daemon 2 | - |
| 16-23 | Local User 0-7 | User-defined facilities reserved for administrators or specific applications to use |
If Further Assistance is required, please proceed to log a support case or chat with our support engineer.
Was this page helpful?