2.8.1. BSD-syslog or legacy-syslog messages

This section describes the format of a syslog message, according to the legacy-syslog or BSD-syslog protocol. A syslog message consists of the following parts:

The total message cannot be longer than 1024 bytes.

The following is a sample syslog message: <133>Feb 25 14:09:07 webserver syslogd: restart. The message corresponds to the following format: <priority>timestamp hostname application: message. The different parts of the message are explained in the following sections.


The syslog-ng application supports longer messages as well. For details, see the log-msg-size() option in Section 9.2, Global options. However, it is not recommended to enable messages larger than the packet size when using UDP destinations.