Hey Marius,
I've tried it and now I'd see the severity# in front of the message....
![01d65b08f71b4683a22ef26c9a0a1533_RackMultipart20161123-63229-p28fgw-syslog_facilities01_inline.png 01d65b08f71b4683a22ef26c9a0a1533_RackMultipart20161123-63229-p28fgw-syslog_facilities01_inline.png](/t5/image/serverpage/image-id/4077iC3E730EFD8CA8E75/image-size/large?v=v2&px=999)
Could you also fix it that the facility information is used.
My WLAN controller has the following syslog settings.
i.e. Station Events should use facility local.1
![01d65b08f71b4683a22ef26c9a0a1533_RackMultipart20161123-52049-19htcv9-syslog_facilities02_inline.png 01d65b08f71b4683a22ef26c9a0a1533_RackMultipart20161123-52049-19htcv9-syslog_facilities02_inline.png](/t5/image/serverpage/image-id/2127iA808482F6E5FE492/image-size/large?v=v2&px=999)
Trace from a packet that is tx by the controller = local.1 for a station events
![01d65b08f71b4683a22ef26c9a0a1533_RackMultipart20161123-21667-v46mlf-syslog_facilities04_inline.png 01d65b08f71b4683a22ef26c9a0a1533_RackMultipart20161123-21667-v46mlf-syslog_facilities04_inline.png](/t5/image/serverpage/image-id/3270i245C94C7F2A196DB/image-size/large?v=v2&px=999)
This is what I get in the EMC syslog...
<6>Nov 23 21:15:58 172.24.24.101 events: EventType[Registration] MAC[84:18:26:7C:1C:2B] AP[AP3825i] SSID[Home] BSSID[D8:84:66:02:DF:E8] Details: Radio[2]
It would be great to also have that information in EMC and be able to filter on it so i.e. I'd only see my station events = local.1
Thanks,
Ron