What are the Syslog Facilities and Levels in MetaDefender Storage Security?

Check Your Version:

This article applies to all supported versions of MetaDefender Storage Security.

A Syslog facility is a field within a Syslog message that identifies the source or category of the message, such as the kernel, mail system, or a specific application. This functions as a filter that actually instructs MetaDefender Storage Security to forward all the logs using the configured Facility.

These facilities, originally based on Unix processes and daemons, work with Syslog Levels (like Emergency, Critical, or Informational) to provide a more comprehensive way to manage and analyze logs in a system or network.

Numerical Code

Facility

Facility Description

0

kernel Messages

Messages generated by the operating system kernel

1

User Level Messages

Messages from user-level processes and applications

2

Mail System

Log entries related to mail servers and email processing

3

System Daemons

Messages from system daemons or background services

4

Security or Authorization Messages 1

Events related to user authentication and authorization, such as login or logout attempts

5

Internal Messages

Messages generated by the syslog daemon itself

6

Line Printer Subsystem

Messages concerning the printing system

7

Network News Subsystem

Log entries related to Usenet news services

8

UUCP Subsystem

Messages about Unix-to-Unix Copy (UUCP) communication

9

Clock Daemon 1

Messages from scheduled tasks or the cron daemon

10

Security or Authorization Messages 2

Private authentication-related events, often used for security-sensitive logs

11

FTP Daemon

Log entries for the FTP (File Transfer Protocol) service

12

NTP Subsystem

Messages from the Network Time Protocol daemon

13

Log Audit

General security-related events and authorization failures

14

Log Alert

Originating process or system component that sent a log message

15

Clock Daemon 2


16-23

Local User 0-7

User-defined facilities reserved for administrators or specific applications to use1414

Support:

If Further Assistance is required, please proceed to log a support case or chat with our support engineer.