Architecting a vRealize Log Insight Solution : Understanding vSphere Logs : 2.10 Syslog Facility Codes
   
2.10 Syslog Facility Codes
Syslog messages are broadly categorized based on the sources that generate them, such as an operating system, a process, or application, and are assigned a facility code represented by integer values ranging between 0 and 23. For example, Cisco devices use the local facility range values 16-23 (local0 – local7). By default, ESXi uses only the facility code local4. The facility configuration is located in the config.xml and vpxa.cfg files.