http://www.splunk.com/support/forum:SplunkGeneral/4141 Mon, 13 Feb 2012 12:08:11 PST Mon, 13 Feb 2012 12:08:11 PST en-us http://creativecommons.org/licenses/by-nc-nd/2.5/ http://www.splunk.com/support/forum:SplunkGeneral/4141/13610 <p>Hi Araitz,<br /> Thanks for the reply.</p> <p>James</p> Thu, 11 Mar 2010 08:07:27 PST jmarcus http://www.splunk.com/support/forum:SplunkGeneral/4141/13610 http://www.splunk.com/support/forum:SplunkGeneral/4141/13596 <p>I think you mean priority rather than facility. Yes, in most cases, local7 (aka debug) will encapsulate 0-6.</p> Wed, 10 Mar 2010 20:37:35 PST araitz http://www.splunk.com/support/forum:SplunkGeneral/4141/13596 http://www.splunk.com/support/forum:SplunkGeneral/4141/13588 <p>Hi,<br /> This is something I have never been really clear on. Is SYSLOG local7 on a Cisco device an accumulation of the messages in local0-6?</p> <p>Thanks,<br /> James</p> Wed, 10 Mar 2010 13:21:13 PST jmarcus http://www.splunk.com/support/forum:SplunkGeneral/4141/13588