Note: If you are receiving messages from a UNIX system, consider using the User
Facility as your first choice. Local0 through Local7 are not used by UNIX and are
traditionally used by networking equipment. Cisco routers, for example, use Local6 or
Local7.
Number Source Number Source
0 kernel messages 12 NTP subsystem
1 user-level messages 13 log audit
2 mail system 14 log alert
3 system daemons 15 clock daemon
4 security/authorization messages 16 local use 0 (local0)
5 messages generated internally by Syslog 17 local use 1 (local1)
6 line printer subsystem 18 local use 2 (local2)
7 network news subsystem 19 local use 2 (local3)
8 UUCP subsystem 20 local use 2 (local4)
9 clock daemon 21 local use 2 (local5)
10 security/authorization messages 22 local use 2 (local6)
11 FTP daemon 23 local use 2 (local7)
Syslog Severities
The following table provides a list of Syslog severity levels with descriptions and
suggested actions for each.
Number Severity Suggested Actions
0 Emergency
A "panic" condition affecting multiple applications,
servers, or sites. System is unusable. Notify all technical
staff on call.
297
Syslog Severities