syslog Parameters (last updated 2009-03-10) Note: The syslog protocol utilizes numerical facility and severity values. Registries included below: - syslog Message Facilities - syslog Message Severities - syslog Version Values - syslog Structured Data ID Values Registry Name: syslog Message Facilities Reference: [RFC3164] Registration Procedure: FCFS (?) Registry: Numerical Code Facility Reference -------------- ------------------------------------------- --------- 0 kernel messages [RFC3164] 1 user-level messages [RFC3164] 2 mail system [RFC3164] 3 system daemons [RFC3164] 4 security/authorization messages (note 1) [RFC3164] 5 messages generated internally by syslogd [RFC3164] 6 line printer subsystem [RFC3164] 7 network news subsystem [RFC3164] 8 UUCP subsystem [RFC3164] 9 clock daemon (note 2) [RFC3164] 10 security/authorization messages (note 1) [RFC3164] 11 FTP daemon [RFC3164] 12 NTP subsystem [RFC3164] 13 log audit (note 1) [RFC3164] 14 log alert (note 1) [RFC3164] 15 clock daemon (note 2) [RFC3164] 16 local use 0 (local0) [RFC3164] 17 local use 1 (local1) [RFC3164] 18 local use 2 (local2) [RFC3164] 19 local use 3 (local3) [RFC3164] 20 local use 4 (local4) [RFC3164] 21 local use 5 (local5) [RFC3164] 22 local use 6 (local6) [RFC3164] 23 local use 7 (local7) [RFC3164] Note 1 - Various operating systems have been found to utilize Facilities 4, 10, 13 and 14 for security/authorization, audit, and alert messages which seem to be similar. Note 2 - Various operating systems have been found to utilize both Facilities 9 and 15 for clock (cron/at) messages. Registry Name: syslog Message Severities Reference: [RFC3164] Registration Procedure: FCFS (?) Registry: Numerical Code Severity Reference -------------- ------------------------------------------- --------- 0 Emergency: system is unusable [RFC3164] 1 Alert: action must be taken immediately [RFC3164] 2 Critical: critical conditions [RFC3164] 3 Error: error conditions [RFC3164] 4 Warning: warning conditions [RFC3164] 5 Notice: normal but significant condition [RFC3164] 6 Informational: informational messages [RFC3164] 7 Debug: debug-level messages [RFC3164] Registry Name: syslog Version Values Reference: [RFC5424] Registration Procedure: Standards Action Registry: Version Format Reference ------- -------------------------------------------- --------- 1 Defined in [RFC5424] [RFC5424] Registry Name: syslog Structured Data ID Values Reference: [RFC5424] Registration Procedure: IETF Review Note: The registration rules for this registry will be that new Structured Data ID values and new Parameter Name values must be registered via IETF Consensus. In addition, once SD-IDs and SD-PARAMs are defined, the syntax and semantics of these registrations must not be altered. In the event that modifications of existing registry items are required, a new SD-ID or SD-PARAM must be created, leaving the older one unchanged. Finally, the IANA does not register, and will not control SD-IDs or SD-PARAMs \with an "@" sign (ABNF %d64) in them. Registry: Structured Data ID Structured Data Parameter Required or Optional ------------------ ------------------------- -------------------- timeQuality OPTIONAL tzKnown OPTIONAL isSynced OPTIONAL syncAccuracy OPTIONAL origin OPTIONAL ip OPTIONAL enterpriseId OPTIONAL software OPTIONAL swVersion OPTIONAL meta OPTIONAL sequenceId OPTIONAL sysUpTime OPTIONAL language OPTIONAL References ---------- [RFC3164] C. Lonvick, "The BSD Syslog Protocol", RFC 3164, August 2001. [RFC5424] R. Gerhards, "The syslog Protocol", RFC 5424, March 2009. (created 2001-08-21) []