Set the facility field

It is possible to set the facility field with the set-facility() rewrite function. When set, the set-facility() rewrite function will only rewrite the ${FACILITY} field in the message to the first parameter value specified in the function.

FilterX has no set_facility() counterpart. See the related set_pri() function, which sets the combined PRI value (facility * 8 + severity), so you cannot set the facility without also setting the severity.

Declaration

log {
    source { system(); };
    if (program("postfix")) {
      rewrite { set-facility("mail"); };
    };
    destination { file("/var/log/mail.log"); };
    flags(flow-control);
};

Parameters

The set-facility() rewrite function has a single, mandatory parameter that can be defined as follows:

set-facility( "parameter1" );

Accepted values

The set-facility() rewrite function accepts the following numeric strings and named values:

Example usage for the set-facility() rewrite function

The following two set-facility() examples are equivalent:

rewrite {
  set-facility("security");
  set-facility("13");
  };

Options

The set-facility() rewrite rule has the following option.

<!-- This file is under the copyright of Axoflow, and licensed under Apache License 2.0, except for using the Axoflow and AxoSyslog trademarks. -->

condition()

Description: Applies the rewrite rule only to the messages that match the specified filter expression. Messages that don’t match the filter pass through the rule unmodified, and continue to the next element of the log path. You can use any filter expression here, and you can reference an existing filter with the filter() function. For details, see Conditional rewrites.