"Mark D. Roth" <[EMAIL PROTECTED]> writes: > The current facility mechanism is an attempt to do category filtering, > but it suffers from lack of granularity or standardization. And it > does not provide any way to filter by daemon. Right. Look at what the NT Event Log does here - it has (as well as the three categories of log - application, security, ...) it has an Application name (not optional), an Event ID, a severity, and a message. Allowing for the fact that application authors seem to completely misuse Event ID type fields, imposing more structure is very good. (The implementation, requiring storing of values and references to fixed strings, and no forwarding capabilities is not so good.) Maybe something that can be hierarchical (Originator -> Application -> Processname -> routine -> errortype) as required. James.
