When adding a Syslog to XG I'm missing documentation about the facilities. What do they mean and what is the use case for the different facilities? Can you write some words about that in the documentation please? Current Help docu extract Nov. 3rd: Facility Informs the syslog server of the log message's source. The facility indicates the log source, for example, an operating system, process, or application. You can configure the facility to distinguish log messages from different devices. The LOCAL0-LOCAL7 option refers to log level information.

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Syslog Facility Kernel vs Daemon vs User Logging - please describe the differences

When adding a Syslog to XG I'm missing documentation about the facilities.

What do they mean and what is the use case for the different facilities? Can you write some words about that in the documentation please?

Current Help docu extract Nov. 3rd:

Facility	Informs the syslog server of the log message's source. The facility indicates the log source, for example, an operating system, process, or application. You can configure the facility to distinguish log messages from different devices. The LOCAL0-LOCAL7 option refers to log level information.

This thread was automatically locked due to age.

Top Replies

R@DocSupport over 3 years ago in reply to LHerzog +1

We'll indeed put more information in the help! Watch this space.

0 R@DocSupport over 3 years ago

Hi LHerzog,

Thanks for your feedback.
I'll update the post when we have published the documentation update.
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 3 years ago

Hello LHerzog,

Syslog is not something specific to Sophos Firewall, it's the usual logging component of Linux systems. There's a lot of documentation available on the internet about it, especially about what is logged in the daemon, kernel, and user facility. (German doc, for example: https://www.ostc.de/howtos/syslog-HOWTO.html)

Btw. there's also a syslog file guide available for SF: https://docs.sophos.com/nsg/sophos-firewall/18.5/PDF/SF%20syslog%20guide%2018.5.pdf

Do you have any specific question regarding the log facilities still not covered?
Cancel
Vote Up 0 Vote Down

Cancel
0 LHerzog over 3 years ago in reply to FormerMember

Hi Ana and R

thanks for your prompt replies.

I'm more familiar with windows systems and hoped to get answers to my questions in the product help. As I read here: https://support.solarwinds.com/SuccessCenter/s/article/Syslog-facilities?language=en_US

there is something special about the Local1-7 facilities.

you could describe how to get boot messages to syslog and how to get other security logs to syslog.

Currently I read it like: we have a feature, here it is - find out for your self how to use it.
Cancel
Vote Up 0 Vote Down

Cancel
0 R@DocSupport over 3 years ago in reply to LHerzog

We'll indeed put more information in the help!
Watch this space.
Cancel
Vote Up +1 Vote Down

Cancel