Hi, The syslog facility calculation is wrong. I created a Jira issue https://issues.apache.org/jira/browse/FLUME-1427 and submitted a patch.
In short, priority = (facility*8) + severity so severity = priority % 8 facility = (priority - severity) /8 ; but in SyslogUtils's buildEvent, facility = (priority - severity) i.e. /8 is missing. The patch is very small and straight forward, can this be applied on 1.2.0 branch and 1.3.0(trunk) thanks Bhaskar
