Linux Security 64: How to check schedule scanning log message’s „Severity“ and „Facility“?

Issue:

How to check schedule scanning log message's "Severity" and "Facility"?

lspmd-start: alert [source=schedule scan]: path=/root/download/eicar.txt.malware; action=rename; infection=EICAR_Test_File
 

Resolution:

If you run journalctl with "-o verbose" you can see priority and facility for each log message.
For lspmd's log, you can run command below:
 

journalctl -o verbose -u f-secure-linuxsecurity-lspmd | egrep 'PRIORITY|FACILITY' | sort -u

Example:
[root@centos7test ~]# journalctl -o verbose -u f-secure-linuxsecurity-lspmd | egrep 'PRIORITY|FACILITY' | sort -u
    PRIORITY=6
    SYSLOG_FACILITY=3