Trying to build my event matrix with my SEIM. Is there a guide with the syslog message ID with event description and subsystem? It is more appropriate to point to a vendor supplied guide and then rank severity by environment than to normalize the events seen and rank them.