In looking at the raw syslog messages, there is a priority code which is listed as the first field (<134>). Sometimes we need to decipher this quickly, so that we can attach a LEM connector to the proper facility.
The priority is facility*8 + severity. So with the priority of 134, we know that the facility is 16 (local0) and severity is informational(6).
Hopefully this helps
Thanks
Amit