143-420 · Question #178
What is the purpose of the syslogdfacility command?
The correct answer is C. It groups together log messages from related switches. See the full explanation below for the reasoning.
Question
What is the purpose of the syslogdfacility command?
Options
- AIt defines the severity level of the syslog messages.
- BIt defines the destination server of the syslog.
- CIt groups together log messages from related switches.
- DIt defines the reporting schedule of the syslog facility.
How the community answered
(34 responses)- A6% (2)
- B9% (3)
- C71% (24)
- D15% (5)
Community Discussion
8
Prof. SaraNov 22, 2025The answer is C. The syslogdfacility command assigns a facility code to outgoing syslog messages, which lets your syslog server sort and group log traffic from related switches into a common bucket, making it far easier to monitor a stack or a campus segment as a logical unit rather than hunting through a flat stream of mixed-source entries.
Hiroshi T.Nov 23, 2025The facility value does help with grouping, but the more precise point is that it lets administrators apply filtering rules and routing policies on the syslog server side based on a numeric severity-to-facility mapping, which is defined in RFC 3164 and later refined in RFC 5424.
Hiroshi T.Nov 6, 2025C is correct, and the Brocade documentation makes the reasoning clear. The syslogdfacility command assigns a facility identifier to a switch so that the syslog server can sort and group messages by source, meaning you can configure the same facility value across a set of related switches and the server treats their output as a cohesive group. This is distinct from severity, which is what option A describes and is controlled separately through syslog level settings. The destination server itself is configured with the syslogd-server command, so option B is describing a different command entirely. When I sat for this one I almost second-guessed myself toward A because the word "facility" in general syslog terminology does carry some severity-adjacent connotations depending on which RFC you have in your head. What pulled me back to C was remembering the actual config example in the Brocade command reference, where the same facility number is applied across a stack of access layer switches so the NOC team can filter logs by building or floor. Once I pictured that real-world grouping use case the answer locked in immediately. Read the vendor docs before the exam, not just general syslog theory.
Toby R.Nov 12, 2025Thought B for sure, but "facility" literally means grouping source, not destination.
Orla P.Nov 4, 2025I locked in D on this one without a second thought. The word "facility" in networking contexts has always pointed me toward scheduling and reporting cycles, and the command name itself leans into that, so defining the reporting schedule is exactly what fits the pattern I have seen across similar vendor questions.
Hiroshi T.Nov 4, 2025Orla, the Cisco IOS documentation for the "logging facility" command states that its purpose is to set the facility type for syslog messages sent to a syslog server, which maps to C, not a reporting schedule. The word "facility" here is a syslog protocol term inherited from RFC 5424, not a reference to scheduling cycles.
Lena V.Nov 23, 2025Going with B on this one, the whole point of configuring syslogd is telling your device where to send its logs, and the facility command is how you specify that destination server IP or hostname. Every practice scenario I have worked through has you set the facility right after you define your logging host, which makes zero sense if it were just about grouping switches.
Hiroshi T.Nov 23, 2025Lena, the facility parameter in syslog specifies the message category or source type, such as local0 through local7, which the receiving server uses to sort and filter incoming messages, not the destination address. The logging host command handles where logs are sent, and the official vendor documentation draws a clear line between those two functions, which is why C is correct.