For this example, the syslog system administrator sets up a server called “syslogger” to handle log messages from two OnSites. One OnSite is located in São Paulo, Brazil, and the other OnSite is in Fremont, California. The syslog server’s administrator wants to aggregate messages from the São Paulo OnSite into the local1 facility, and to aggregate messages from Fremont OnSite into the local2 facility.
On “syslogger” the system administrator has configured the system logging utility to write messages from the local1 facility to the /var/log/saopaulo-config file and the messages from the local2 facility to the /var/log/fremont-config file. If you were in Fremont and identifying the syslog server using the Web Manager, according to this example, you would select the facility number Local 2 from the Facility Number pull-down menu on the Syslog screen (under Configuration>Network>Syslog in Expert mode).