This seems like a question that should be easy to find an answer on but anyway..
I am setting up the syslog servers and all is working but I have read a number of different places about the facility. Some done change it. Some change it to 4 some to 5, etc.
What is the function/purpose/layman's explanation of the logging facility.
Does it matter which one is used. Are there advantages to use one over others, etc.
Thanks. Matt
The logging facility is used to differentiate syslog messages. Say you are using the same syslog server to log messages from a group of servers, routers and switches, you could use a different syslog facility for each one. Of course you would need to configure your syslog server to handle them differently, but if you aren't doing this then there is no reason to change it in the first place.
Have something to add? Share your thoughts — no account required.
Ask the community — no account required