Solved: Re: What is <14> we see in Splunk logs, each log s... - Splunk Community

Splunk Search

<14> prefix is displayed in splunk logs, what does it mean, why is it displayed? Can anyone answer this question please?

1 Solution

Solution

Typically syslog events sent over the network start with a <number> containing information about so called "facility" and severity of the event. See https://datatracker.ietf.org/doc/html/rfc3164#section-4.1.1

View solution in original post

Solution

Typically syslog events sent over the network start with a <number> containing information about so called "facility" and severity of the event. See https://datatracker.ietf.org/doc/html/rfc3164#section-4.1.1

Thank you!

Precisely, which log? Can you provide an example? (Anonymised as necessary.)

Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...