The docs give a fixed list of facilties for syslog, but it's clearly possible to have more (http isn't on the list). Do I just describe it in the conf file and start using it or is is more involved? (It's an ecommerce system and I want to log the payment activities better.)
Adding a new facility to syslog
syslog
Best Answer
The syslog protocol only allows the predefined facilities defined in RFC 3164. Most (if not all) syslog daemons will process messages with different facility identifiers as corrupt.
But you can easily use the facilities
local0
throughlocal7
for your custom logging needs, which is what they are there for.