Manipulating journalctl output

[Tom H]

On Fri, Jan 3, 2014 at 3:44 PM, Suvayu Ali <fatkasuvayu+linux at gmail.com> wrote:
> On Fri, Jan 03, 2014 at 02:01:26AM +0000, Tom H wrote:
>>
>> Via google: http://wiki.gentoo.org/wiki/Rsyslog
>
> Thank you Tom.  As ever, Gentoo & Arch has the best documentation again!

You're welcome.

They do have excellent documentation!

But in this case they both have mistakes.

Gentoo says that "10" corresponds to "security" but "security" is an
old alias of "auth". "10" should be listed as corresponding to
"authpriv".

Arch doesn't say that "9" corresponds to "cron", even though the
explanation is that it corresponds to a "clock daemon", and that it
actually corresponds to "9". You can look it up in "syslog.h" as
someone pointed out earlier or you can edit rsyslog.conf for rsyslog
to print out the facilities in their word and number forms in the
logs.