With syslog you get not only the "facility" category (i.e. "kern") but also the "priority" (or "severity") level.

I didn't mention it because it's irrelevant here. Yes you can filter via facility as well as severity. It still doesn't allow you to filter by source (as in what program logged the entry). grep at a later stage is the only way. Volker