syslog Parameters

(last updated 2007-09-13)

Note: The syslog protocol utilizes numerical facility and severity values.

Registries included below:
- syslog Message Facilities
- syslog Message Severities
- syslog Version Values
- syslog Structured Data ID Values


Registry Name: syslog Message Facilities
Reference: [RFC3164]
Registration Procedure: 

Numerical  
Code       Faciltiy                                     Reference
---------  -------------------------------------------  ---------
0          kernel messages                              [RFC3164]
1          user-level messages                          [RFC3164]
2          mail system                                  [RFC3164]
3          system daemons                               [RFC3164]
4          security/authorization messages (note 1)     [RFC3164]
5          messages generated internally by syslogd     [RFC3164]
6          line printer subsystem                       [RFC3164]
7          network news subsystem                       [RFC3164]
8          UUCP subsystem                               [RFC3164]
9          clock daemon (note 2)                        [RFC3164]
10         security/authorization messages (note 1) 	[RFC3164]
11         FTP daemon                                   [RFC3164]
12         NTP subsystem                                [RFC3164]
13         log audit (note 1)                           [RFC3164]
14         log alert (note 1)                           [RFC3164]
15         clock daemon (note 2)                        [RFC3164]
16         local use 0  (local0)                        [RFC3164]
17         local use 1  (local1)                        [RFC3164]
18         local use 2  (local2)                        [RFC3164]
19         local use 3  (local3)                        [RFC3164]
20         local use 4  (local4)                        [RFC3164]
21         local use 5  (local5)                        [RFC3164]
22         local use 6  (local6)                        [RFC3164]
23	       local use 7  (local7)                        [RFC3164]

Note 1 - Various operating systems have been found to utilize  
         Facilities 4, 10, 13 and 14 for security/authorization,  
         audit, and alert messages which seem to be similar. 

Note 2 - Various operating systems have been found to utilize  
         both Facilities 9 and 15 for clock (cron/at) messages. 


Registry Name: syslog Message Severities
Reference: [RFC3164]
Registration Procedure: 

Numerical
Code       Severity                                     Reference
---------  -------------------------------------------  ---------
0          Emergency: system is unusable                [RFC3164]
1          Alert: action must be taken immediately  	[RFC3164]
2          Critical: critical conditions                [RFC3164]
3          Error: error conditions                      [RFC3164]
4          Warning: warning conditions                  [RFC3164]
5          Notice: normal but significant condition     [RFC3164]
6          Informational: informational messages        [RFC3164]
7          Debug: debug-level messages                  [RFC3164]
    

Registry Name: syslog Version Values
Reference: [RFC-ietf-syslog-protocol-23.txt]
Registration Procedure: Standards Action 

Version  Format                                        Reference
-------  --------------------------------------------  -----------------------------
1        Defined in [RFC-ietf-syslog-protocol-23.txt]  [RFC-ietf-syslog-protocol-23.txt]


Registry Name: syslog Structured Data ID Values
Reference: [RFC-ietf-syslog-protocol-23.txt]
Registration Procedure: IETF Consensus

Note: 
The registration rules for this registry will be that
new Structured Data ID values and new Parameter Name
values must be registered via IETF Consensus. In addition,
once SD-IDs and SD-PARAMs are defined, the syntax and
semantics of these registrations must not be altered.
In the event that modifications of existing registry items
are required, a new SD-ID or SD-PARAM must be created,
leaving the older one unchanged. Finally, the IANA does
not register, and will not control SD-IDs or SD-PARAMs
\with an "@" sign (ABNF %d64) in them.

Structured    Structured              Required or
Data ID       Data Parameter          Optional
------------  ----------------------  -----------
timeQuality                           OPTIONAL
              tzKnown                 OPTIONAL
              isSynced                OPTIONAL
              syncAccuracy            OPTIONAL
origin                                OPTIONAL
              ip                      OPTIONAL
              enterpriseId            OPTIONAL
              software                OPTIONAL
              swVersion               OPTIONAL
meta                                  OPTIONAL
              sequenceId              OPTIONAL
              sysUpTime               OPTIONAL
              language                OPTIONAL


References
----------

[RFC3164]  C. Lonvick, "The BSD Syslog Protocol", RFC 3164,
           August 2001.

[RFC-ietf-syslog-protocol-23.txt]
           R. Gerhards, "The syslog Protocol", RFC XXXX, Month Year.
	

(created 2001-08-21)

[]
    