The facility is one of the following keywords: auth, authpriv, cron, daemon, kern, lpr, mail, mark,
news, security (same as auth), syslog, user, uucp and local0 through local7. The keyword security
should not be used anymore and mark is only for internal use and therefore should not be used in appli‐
cations. Anyway, you may want to specify and redirect these messages here. The facility specifies the
subsystem that produced the message, i.e. all mail programs log with the mail facility (LOG_MAIL) if
they log using syslog.

The priority is one of the following keywords, in ascending order: debug, info, notice, warning, warn
(same as warning), err, error (same as err), crit, alert, emerg, panic (same as emerg). The keywords
error, warn and panic are deprecated and should not be used anymore. The priority defines the severity
of the message.

• https://tools.ietf.org/html/rfc5424
• https://tools.ietf.org/html/rfc3164

rsyslog (rsyslog.py)

• /etc/rsyslog.conf Default Configuration
• rsyslog Facility and Severity
• Syslog Server Configuraiton with rsyslog

rsyslog (rsyslog.py)