El campo facility procura identificar al programa que originó el mensaje, mientras que el campo level busca clasificar el nivel de importancia o severidad del mismo.

• Emergency: Event logs, specifically administrative events, can generate an emergency severity level. This level indicates the system has become unstable.

• Alert: Attack logs are the only logs that generate an alert severity level. This level indicates that immediate action is required.

• Critical: This level is generated by event, antivirus, and spam filter logs and indicates that functionality is affected.

• Error: This level is generated by event and spam filter logs and indicates that an error condition exists and functionality could be affected.

• Warning: This level is generated by event and antivirus logs and indicates that functionality could be affected.

• Notification: This level is generated by traffic and web filter logs and indicates information about normal events.

• Information: This level is generated by content archive, event and spam

• Debug: