Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm writing some parsing logic for syslog-ng messages and am noticing that for many of the commands syslog-ng prepends a <[0-9]+> string to most of my messages.

Here is an example from me running sudo:

<85>Aug  2 09:42:09 sholsapp-ld sudo: sholsapp : TTY=pts/28 ; PWD=/home/sholsapp ; USER=root ; COMMAND=/bin/ls

What is the meaning/significance of the <85>?

share|improve this question
as Clayton answered, thats the priority+facility. But that shouldn't be showing up. What does your config for that (file) destination look like? You're not using a custom template or anything are you? – Patrick Aug 2 '12 at 17:10
No, just the config file that redhat linux provided when I did yum install syslog-ng. – gnucom Aug 2 '12 at 17:48
up vote 2 down vote accepted

That's the PRI. It is an 8bit number that indicates the severity and facility. More information is available HERE

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.