[logs] Syslog analisys - where is the severity?

Previous message: Daniel Cid: "[logs] OSSEC HIDS v0.3 available"
Next in thread: Jeff Saxton: "[logs] Re: Syslog analisys - where is the severity?"
Reply: Jeff Saxton: "[logs] Re: Syslog analisys - where is the severity?"
Reply: Jeremy Mates: "[logs] Re: Syslog analisys - where is the severity?"
Reply: Daniel San Miguel Reyero: "[logs] Re: Syslog analisys - where is the severity?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

joseg@private

Hello all. I've been trying to analize syslog messages from Watchguard 
and NetScreen Boxes I'm trying to parse the content, I can get a lot of 
values from the messages but the value that I can't find anywhere is the 
severity(not even the facility). the content of the message is very rich 
but I have not figure out how to get the severity. I see that syslog 
messages from both boxes starts with <digit>, is that the severity and 
the facilty. Where can I find this values?

Thanks in advance

Gerardo Amaya
_______________________________________________
LogAnalysis mailing list
LogAnalysis@private
http://lists.shmoo.com/mailman/listinfo/loganalysis