syslog Parameters (last updated 2010-02-01) Note: The syslog protocol utilizes numerical facility and severity values. Registries included below: - syslog Message Facilities - syslog Message Severities - syslog Version Values - syslog Structured Data ID Values - syslog-sign Protocol Version Values - syslog-sign Hash Algorithm Values - syslog-sign Signature Scheme Values - syslog-sign SG Field Values - syslog-sign Key Blob Type Values Registry Name: syslog Message Facilities Reference: [RFC3164] Registration Procedure: FCFS (?) Registry: Numerical Code Facility Reference -------------- ------------------------------------------- --------- 0 kernel messages [RFC3164] 1 user-level messages [RFC3164] 2 mail system [RFC3164] 3 system daemons [RFC3164] 4 security/authorization messages (note 1) [RFC3164] 5 messages generated internally by syslogd [RFC3164] 6 line printer subsystem [RFC3164] 7 network news subsystem [RFC3164] 8 UUCP subsystem [RFC3164] 9 clock daemon (note 2) [RFC3164] 10 security/authorization messages (note 1) [RFC3164] 11 FTP daemon [RFC3164] 12 NTP subsystem [RFC3164] 13 log audit (note 1) [RFC3164] 14 log alert (note 1) [RFC3164] 15 clock daemon (note 2) [RFC3164] 16 local use 0 (local0) [RFC3164] 17 local use 1 (local1) [RFC3164] 18 local use 2 (local2) [RFC3164] 19 local use 3 (local3) [RFC3164] 20 local use 4 (local4) [RFC3164] 21 local use 5 (local5) [RFC3164] 22 local use 6 (local6) [RFC3164] 23 local use 7 (local7) [RFC3164] Note 1 - Various operating systems have been found to utilize Facilities 4, 10, 13 and 14 for security/authorization, audit, and alert messages which seem to be similar. Note 2 - Various operating systems have been found to utilize both Facilities 9 and 15 for clock (cron/at) messages. Registry Name: syslog Message Severities Reference: [RFC3164] Registration Procedure: FCFS (?) Registry: Numerical Code Severity Reference -------------- ------------------------------------------- --------- 0 Emergency: system is unusable [RFC3164] 1 Alert: action must be taken immediately [RFC3164] 2 Critical: critical conditions [RFC3164] 3 Error: error conditions [RFC3164] 4 Warning: warning conditions [RFC3164] 5 Notice: normal but significant condition [RFC3164] 6 Informational: informational messages [RFC3164] 7 Debug: debug-level messages [RFC3164] Registry Name: syslog Version Values Reference: [RFC5424] Registration Procedure: Standards Action Registry: Version Format Reference ------- -------------------------------------------- --------- 1 Defined in [RFC5424] [RFC5424] Registry Name: syslog Structured Data ID Values Reference: [RFC5424] Registration Procedure: IETF Review Note: The registration rules for this registry will be that new Structured Data ID values and new Parameter Name values must be registered via IETF Consensus. In addition, once SD-IDs and SD-PARAMs are defined, the syntax and semantics of these registrations must not be altered. In the event that modifications of existing registry items are required, a new SD-ID or SD-PARAM must be created, leaving the older one unchanged. Finally, the IANA does not register, and will not control SD-IDs or SD-PARAMs \with an "@" sign (ABNF %d64) in them. Registry: Structured Data ID Structured Data Parameter Required or Optional Reference ------------------ ------------------------- -------------------- --------- timeQuality OPTIONAL [RFC5424] tzKnown OPTIONAL [RFC5424] isSynced OPTIONAL [RFC5424] syncAccuracy OPTIONAL [RFC5424] origin OPTIONAL [RFC5424] ip OPTIONAL [RFC5424] enterpriseId OPTIONAL [RFC5424] software OPTIONAL [RFC5424] swVersion OPTIONAL [RFC5424] meta OPTIONAL [RFC5424] sequenceId OPTIONAL [RFC5424] sysUpTime OPTIONAL [RFC5424] language OPTIONAL [RFC5424] snmp OPTIONAL [RFC5675] ctxEngine OPTIONAL [RFC5675] ctxName OPTIONAL [RFC5675] v OPTIONAL [RFC5675] l OPTIONAL [RFC5675] o OPTIONAL [RFC5675] x OPTIONAL [RFC5675] c OPTIONAL [RFC5675] C OPTIONAL [RFC5675] u OPTIONAL [RFC5675] d OPTIONAL [RFC5675] i OPTIONAL [RFC5675] n OPTIONAL [RFC5675] p OPTIONAL [RFC5675] t OPTIONAL [RFC5675] a OPTIONAL [RFC5675] alarm OPTIONAL [RFC5674] resource MANDATORY [RFC5674] probableCause MANDATORY [RFC5674] perceivedSeverity MANDATORY [RFC5674] eventType OPTIONAL [RFC5674] trendIndication OPTIONAL [RFC5674] resourceURI OPTIONAL [RFC5674] ssign MANDATORY [RFC-ietf-syslog-sign-29.txt] VER MANDATORY [RFC-ietf-syslog-sign-29.txt] RSID MANDATORY [RFC-ietf-syslog-sign-29.txt] SG MANDATORY [RFC-ietf-syslog-sign-29.txt] SPRI MANDATORY [RFC-ietf-syslog-sign-29.txt] GBC MANDATORY [RFC-ietf-syslog-sign-29.txt] FMN MANDATORY [RFC-ietf-syslog-sign-29.txt] CNT MANDATORY [RFC-ietf-syslog-sign-29.txt] HB MANDATORY [RFC-ietf-syslog-sign-29.txt] SIGN MANDATORY [RFC-ietf-syslog-sign-29.txt] ssign-cert MANDATORY [RFC-ietf-syslog-sign-29.txt] VER MANDATORY [RFC-ietf-syslog-sign-29.txt] RSID MANDATORY [RFC-ietf-syslog-sign-29.txt] SG MANDATORY [RFC-ietf-syslog-sign-29.txt] SPRI MANDATORY [RFC-ietf-syslog-sign-29.txt] TPBL MANDATORY [RFC-ietf-syslog-sign-29.txt] INDEX MANDATORY [RFC-ietf-syslog-sign-29.txt] FLEN MANDATORY [RFC-ietf-syslog-sign-29.txt] FRAG MANDATORY [RFC-ietf-syslog-sign-29.txt] SIGN MANDATORY [RFC-ietf-syslog-sign-29.txt] Registry Name: syslog-sign Protocol Version Values Reference: [RFC-ietf-syslog-sign-29.txt] Registration Procedure: IETF Review Registry: Value Protocol Version Reference ------- -------------------------------------------- --------- 00 Reserved [RFC-ietf-syslog-sign-29.txt] 01 Defined in [RFC-ietf-syslog-sign-29.txt] [RFC-ietf-syslog-sign-29.txt] 02-50 Unassigned 51-99 Reserved for Private Use [RFC-ietf-syslog-sign-29.txt] Registry Name: syslog-sign Hash Algorithm Values Reference: [RFC-ietf-syslog-sign-29.txt] Registration Procedure: IETF Review Note: New values are assigned incrementally from 0-9, then from a-z, then from A-Z. Registry: Value Protocol Version Hash Algorithm Reference ----- ---------------- -------------------------- --------- 0 01 Reserved [RFC-ietf-syslog-sign-29.txt] 1 01 SHA1 [RFC-ietf-syslog-sign-29.txt] 2 01 SHA256 [RFC-ietf-syslog-sign-29.txt] Registry Name: syslog-sign Signature Scheme Values Reference: [RFC-ietf-syslog-sign-29.txt] Registration Procedure: IETF Review Note: The range for values is 0-9. Registry: Value Protocol Version Signature Scheme Reference ----- ---------------- -------------------------- --------- 0 01 Reserved [RFC-ietf-syslog-sign-29.txt] 1 01 OpenPGP DSA [RFC-ietf-syslog-sign-29.txt] Registry Name: syslog-sign SG Field Values Reference: [RFC-ietf-syslog-sign-29.txt] Registration Procedure: IETF Review Registry: Value Meaning Reference ------- -------------------------------------------- --------- 0 per [RFC-ietf-syslog-sign-29.txt] [RFC-ietf-syslog-sign-29.txt] 1 per [RFC-ietf-syslog-sign-29.txt] [RFC-ietf-syslog-sign-29.txt] 2 per [RFC-ietf-syslog-sign-29.txt] [RFC-ietf-syslog-sign-29.txt] 3 per [RFC-ietf-syslog-sign-29.txt] [RFC-ietf-syslog-sign-29.txt] 4-7 Unassigned 8-9 Reserved for Private Use [RFC-ietf-syslog-sign-29.txt] Registry Name: syslog-sign Key Blob Type Values Reference: [RFC-ietf-syslog-sign-29.txt] Registration Procedure: IETF Review Note: Upper-case letters are assigned by IANA. Lower-case letters are vendor-specific. Registry: Value Key Blob Type Reference ------- -------------------------------------------------- --------- C a PKIX certificate [RFC-ietf-syslog-sign-29.txt] P an OpenPGP certificate [RFC-ietf-syslog-sign-29.txt] K the public key whose corresponding private key is [RFC-ietf-syslog-sign-29.txt] used to sign the messages N no key information sent, key is pre-distributed [RFC-ietf-syslog-sign-29.txt] U installation-specific key exchange information [RFC-ietf-syslog-sign-29.txt] References ---------- [RFC3164] C. Lonvick, "The BSD Syslog Protocol", RFC 3164, August 2001. [RFC5424] R. Gerhards, "The syslog Protocol", RFC 5424, March 2009. [RFC5674] S. Chisholm, R. Gerhards, "Alarms in SYSLOG", RFC 5674, October 2009. [RFC5675] V. Marinov, J. Schoenwaelder, "Mapping Simple Network Management Protocol (SNMP) Notifications to SYSLOG Messages", RFC 5675, October 2009. [RFC-ietf-syslog-sign-29.txt] J. Kelsey, J Callas, A. Clemm, "Signed syslog Messages", RFC XXXX, Month Year. (created 2001-08-21) []