What is <14> we see in Splunk logs, each log starts with <14> what does it pertain to ? can anyone answer this please?

[jlsiri]

<14> prefix is displayed in splunk logs, what does it mean, why is it displayed? Can anyone answer this question please?

[PickleRick · Accepted solution]

Typically syslog events sent over the network start with a <number> containing information about so called "facility" and severity of the event.  See https://datatracker.ietf.org/doc/html/rfc3164#section-4.1.1

[jlsiri]

Thank you!

[ITWhisperer]

Precisely, which log? Can you provide an example? (Anonymised as necessary.)