Syslog — Facilities, Severity & Timestamps

Every event is classified facility (which subsystem) + severity 0–7 (emergency → debug; “0 is worst, 7 is chattiest”), shipped to a central server over UDP/514 — or TCP/6514 with TLS when logs matter for compliance. service timestamps log datetime msec localtime show-timezone logging host 192.168.1.50 transport tcp logging trap informational logging source-interface Loopback0 logging […]