The priority in a SYSLOG message contains information about the the message severity and the facility (service or component that triggered the message).
The eight severity levels originally defined in SYSLOG have been reduced to five levels in the device. The table below shows the correlation between the alert level, the meaning and the SYSLOG severities.
| Priority | Meaning | SYSLOG severity |
|---|---|---|
| Alert | This category includes all messages requiring the system administrator's close attention. | PANIC, ALERT, CRIT |
| Error | All error messages which can occur under normal conditions are communicated at this level; no special attention is required by the administrator (e.g. connection errors). | ERROR |
| Warning | This level communicates messages which do not compromise normal operating conditions. | WARNING |
| Information | At this level, all messages are sent that have a purely informational character (e.g. accounting information). | NOTICE, INFORM |
| Debug | Communication of all debug messages. Debug messages generate large data volumes and can compromise the device's operation. For this reason they should be disabled for normal operations and only used for troubleshooting. | DEBUG |
The table below provides an overview of the meaning of all internal message sources that you can set in the device. The final column in the table also provides the default correlation between the internal sources of the device and the SYSLOG facilities. This mapping can be changed, if necessary.
| Source | Meaning | Facility |
|---|---|---|
| System | System messages (boot events, timer system, etc.) | KERNEL |
| Logins | Messages about successful connection and disconnection as well as about login and logout of a user during PPP negotiation as well as errors that occur in the process | AUTH |
| System time | Messages about changes to the system time | CRON |
| CLI login | Messages about CLI logins (Telnet, Outband, etc.), logouts and any errors that occurred during this. | AUTHPRIV |
| Connections | Messages about any errors that occurred during establishment and termination of connections (display trace) | LOCAL0 |
| Accounting | Accounting information stored after termination of a connection (user, online time, transfer volumes) | LOCAL1 |
| Administration | Messages on changes to the configuration, remotely executed commands, etc. | LOCAL2 |
| Router | Regular statistics about the most frequently used services (breakdown per port number) and messages about filtered packets, routing errors, etc. | LOCAL3 |
