"Logging Facility?"

[stakano]

What is the meaning behind the "loggin facility" command?

Can anybody clarify?

Cisco says this:
"The single syslog daemon (syslogd) can be thought of as having multiple pipes. It uses the pipes to decide where to send incoming information based on the pipe on which the information arrives. In this analogy, the logging facilities are the pipes by which the syslogd decides where to send information it receives.

The eight logging facilities commonly used for syslog are local0 through local7"

 

[yizhar]

HI.

As far as I know, the facility is simply a tag, a label, that is sent with each message.
It has no meaning by itself, but the syslog server can, for example, write syslog messages to different files, acording to the facility value.

This is useful for implementations of syslog server that receives messages from more then one source. If you are syslogging only from a single pix to a single syslog server, I think that there is no use for this option - simply keep the default.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[wybnormal]

Each syslog message uses two values. One is the severity level, 0 to 7. The second value is the facility level or *where* the message will go. These values are from local(0) to local(7) and 0 is not used on the PIX but there for compatiblity with Unix. Each facilty level can be thought of as a pipe leading to the syslogd process. Default is local4(20) which is that the PIX facility 20 will send it's messages to local4 on the unix box.

With this you have multiple PIXs( or anything else for that matter) send their files to a single syslog server and then each data stream can be put into it's own directory..ie.. PIX1, PIX2, PIX3 and so on.

MikeS
Find me at

http://www.packetattack.com

"Take advantage of the enemy's unreadiness, make your way by unexpected routes, and attack unguarded spots."
Sun Tzu