3.1 Facilities

You can get a list of all facilities using “man 3 syslog”, but here is a summary:

• auth: security/authentication (deprecated).
• authpriv: security/authentication, private. This facility should be treated with care to ensure the security and privacy of the system!
• cron: system scheduled operations, typically from crond or atd. Tasks are typically scheduled by the commands crontab or at, but can also be specified by files in /etc/cron.d and /etc/at.d.
• daemon: all other daemons that do not fit the other facilities.
• ftp: FTP daemon. This may also include sftp.
• kern: kernel messages.
• local0 to local7: reserved for local use.
• lpr: printer daemon, includes cupsd.
• mail: mail daemon/daemons. This typically includes the SMTP POP3 and/or IMAP daemons.
• news: the USENET news subsystem. This is typically not used in most systems now.
• syslog: internal messages from syslogd.
• user: generic user-level messages.
• uucp: messages from the UUCP subsystem (also rarely used).