Canon Authorized Sen for ImageRUNNER Machines Version 4.1 - Manual (Page 119)

Authorized Send Installation and Configuration Guide for imageRUNNER Machines 119
4. Select the [Enable Syslog] check box.
If you select the [Enable Syslog] check box, at least one syslog server must be
configured.
Authorized Send supports only the user-level messages (Numeric Code = 1) and
security/authorization messages (Numeric Code = 4) Facilities of the Syslog
RFC3164 Protocol.
User-level messages are logged locally within the Authorized Send application.
Security/authorization messages are also logged locally, as well as sent to all
configured remote syslog servers.
Messages are logged in the following format:
<PRI#> HEADER MSG
PRI = Priority number depending on the Facility and Severity.
HEADER = Mmm dd hh:mm:ss HostName/IP
MSG = Tag (the application) followed by the message.
For example: <34>Feb 23 22:14:15 iR-HostName AS sign-in failed.
NOTE
The messages sent to a remote syslog server cannot exceed 1,024 bytes. Any
messages that exceed 1,024 bytes are split and sent as multiple messages.