syslog Parameters

(last updated 2009-03-10)

Note: The syslog protocol utilizes numerical facility and severity values.

Registries included below:
- syslog Message Facilities
- syslog Message Severities
- syslog Version Values
- syslog Structured Data ID Values


Registry Name: syslog Message Facilities
Reference: [RFC3164]
Registration Procedure: FCFS (?)

Registry:
Numerical Code  Facility                                     Reference
--------------  -------------------------------------------  ---------
0               kernel messages                              [RFC3164]
1               user-level messages                          [RFC3164]
2               mail system                                  [RFC3164]
3               system daemons                               [RFC3164]
4               security/authorization messages (note 1)     [RFC3164]
5               messages generated internally by syslogd     [RFC3164]
6               line printer subsystem                       [RFC3164]
7               network news subsystem                       [RFC3164]
8               UUCP subsystem                               [RFC3164]
9               clock daemon (note 2)                        [RFC3164]
10              security/authorization messages (note 1) 	[RFC3164]
11              FTP daemon                                   [RFC3164]
12              NTP subsystem                                [RFC3164]
13              log audit (note 1)                           [RFC3164]
14              log alert (note 1)                           [RFC3164]
15              clock daemon (note 2)                        [RFC3164]
16              local use 0  (local0)                        [RFC3164]
17              local use 1  (local1)                        [RFC3164]
18              local use 2  (local2)                        [RFC3164]
19              local use 3  (local3)                        [RFC3164]
20              local use 4  (local4)                        [RFC3164]
21              local use 5  (local5)                        [RFC3164]
22              local use 6  (local6)                        [RFC3164]
23              local use 7  (local7)                        [RFC3164]

Note 1 - Various operating systems have been found to utilize  
         Facilities 4, 10, 13 and 14 for security/authorization,  
         audit, and alert messages which seem to be similar. 

Note 2 - Various operating systems have been found to utilize  
         both Facilities 9 and 15 for clock (cron/at) messages. 


Registry Name: syslog Message Severities
Reference: [RFC3164]
Registration Procedure: FCFS (?)

Registry:

Numerical Code  Severity                                     Reference
--------------  -------------------------------------------  ---------
0               Emergency: system is unusable                [RFC3164]
1               Alert: action must be taken immediately  	[RFC3164]
2               Critical: critical conditions                [RFC3164]
3               Error: error conditions                      [RFC3164]
4               Warning: warning conditions                  [RFC3164]
5               Notice: normal but significant condition     [RFC3164]
6               Informational: informational messages        [RFC3164]
7               Debug: debug-level messages                  [RFC3164]
     

Registry Name: syslog Version Values
Reference: [RFC5424]
Registration Procedure: Standards Action 

Registry:
Version  Format                                        Reference
-------  --------------------------------------------  ---------
1        Defined in [RFC5424]                          [RFC5424]


Registry Name: syslog Structured Data ID Values
Reference: [RFC5424]
Registration Procedure: IETF Review

Note: 
The registration rules for this registry will be that
new Structured Data ID values and new Parameter Name
values must be registered via IETF Consensus. In addition,
once SD-IDs and SD-PARAMs are defined, the syntax and
semantics of these registrations must not be altered.
In the event that modifications of existing registry items
are required, a new SD-ID or SD-PARAM must be created,
leaving the older one unchanged. Finally, the IANA does
not register, and will not control SD-IDs or SD-PARAMs
\with an "@" sign (ABNF %d64) in them.

Registry:
Structured Data ID  Structured Data Parameter  Required or Optional
------------------  -------------------------  --------------------
timeQuality                                    OPTIONAL
                    tzKnown                    OPTIONAL
                    isSynced                   OPTIONAL
                    syncAccuracy               OPTIONAL
origin                                         OPTIONAL
                    ip                         OPTIONAL
                    enterpriseId               OPTIONAL
                    software                   OPTIONAL
                    swVersion                  OPTIONAL
meta                                           OPTIONAL
                    sequenceId                 OPTIONAL
                    sysUpTime                  OPTIONAL
                    language                   OPTIONAL


References
----------
[RFC3164]  C. Lonvick, "The BSD Syslog Protocol", RFC 3164,
           August 2001.

[RFC5424]  R. Gerhards, "The syslog Protocol", RFC 5424, March 2009.
	

(created 2001-08-21)

[]
    