Documentation forSolarWinds

Syslog formats

This topic applies to KCT 3.12.7 and earlier. If you are on KCT NG 2026.2 or later, see NG topic.

KCT can be configured to output syslog messages in either RFC 3164 or RFC 5424 formats. As a default, the syslog format is set to None.

RFC 3164 syslog header format

PRI (Priority)

Specifies that importance and type of message, indicating how critical or urgent the log entry is.
Timestamp

Shows the date and time when the message was generated.

Uses a short month name, day, and time (hours:minutes:seconds).
Hostname

Identifies the system or device that generated the message.
Process Name

Shows which application or process generated the message.
MSG (Message Content)

Contains main log message text.

RFC 5424 syslog header format

PRI (Priority)

Specifies that importance and type of message, indicating how critical or urgent the log entry is.
Version

Indicates the version of the syslog protocol.

1 means the message follows RFC 5424 version 1.
Timestamp

Shows the date and time when the message was generated.

Includes full year, time, and time zone information.
Hostname

Identifies the system or device that generated the message.
APP-NAME

Shows which application or process generated the message.
PROCID

A process identifier for the application instance.

- means no process ID is provided.
MSGID

An identifier for the message type or category.

- means no message ID is provided.
STRUCTURED-DATA

Optional field that carries structured information in key-value format for automated processing.

- means no structured data is provided.
MSG (Message Content)

Contains main log message text.