Exercise 3: Syslog Severity 2 vs. Severity 5 — Possible Solution ==================================================================== WHICH ONE IS MORE SEVERE ------------------------------ Per this chapter, severity 2 is more severe than severity 5. Syslog's own numbering runs from 0 (Emergency, most severe) to 7 (Debug, least severe) - stated directly: "Lower numbers mean higher severity." Severity 2 is closer to 0 than severity 5 is, making it the more serious of the two. WHY, ACCORDING TO THIS CHAPTER ------------------------------ Per this chapter's own syslog table, this numbering runs in "the opposite direction application-level logging usually reads in" - where higher-sounding names like CRITICAL feel more severe and DEBUG feels least severe, syslog instead assigns its most severe level the LOWEST number (0) and its least severe level the HIGHEST number (7). Severity 2 and severity 5 both follow that same lower-is-worse rule. WHAT EACH ONE ROUGHLY CORRESPONDS TO ------------------------------ Per this chapter's own mapping table: - Severity 2 = "Critical" = roughly application-level CRITICAL / FATAL - Severity 5 = "Notice" = "normal but significant" - a level with no single direct equivalent in the simpler five-level application scheme, sitting essentially between INFO and WARN WHY THIS WORKS AS AN ANSWER ------------------------------ It correctly identifies severity 2 as more severe using syslog's own lower-number-is-worse convention, correctly explains that this is the reverse of the usual application-level reading direction, and correctly names each severity's rough application-level equivalent from this chapter's own table.