A mnemonic is a short text code in a Syslog message that identifies the specific reason or functional area associated with an event. It appears after the facility and severity, before the detailed description. section 7.2 section 7.3
Reading UPDOWN
In %LINK-3-UPDOWN: Interface FastEthernet0/1, changed state to down, LINK identifies the facility, 3 identifies severity, UPDOWN identifies an interface state change, and the description identifies the affected interface and new state. section 7.2
000065: Sep 19 01:01:01.133: %LINK-3-UPDOWN: Interface FastEthernet0/1, changed state to down
Use the complete Syslog line to locate the facility, severity, mnemonic, and event description in sequence. section 7.2
