System Logging Protocol

Syslog is a standard messaging protocol for sending and receiving event messages on Unix-based operating systems. With it, users receive detailed, formatted information about errors, warnings, and other relevant data generated by the network or connected devices.

Why is Syslog important?

Syslog messages consist of a severity level from 0 to 7 that outline how severe a log event is, with 0 being a system emergency and 7 being simple debug-level messages. Similarly, messages include a facility level from 0 to 23 that determines the part of the system that produced the log event.

You can read more about these specific codes, as well as centralized logging server architecture, in this article by devconnected.

Furthermore, due to the popularity and flexibility of Unix-based operating systems, Syslog is often compatible with a wide range of servers, applications, and network equipment like routers and printers. 

Because Syslog enables this detailed collection and dissection of network activity to a centralized logging server, it has become an important tool for many system administrators and IT professionals to maintain control of vast networks of connected devices, and is crucial for maintaining a reliable, centralized IT infrastructure.