In the sourcefire admin console for configuring syslog "alert" is a facility option, there is an option for priority as well 2 separate items and "alert" is an option for both. That being said I can choose from a list of other facilities like Local0
are the log directories that are listed via the checklogs command the only ones I can use? It seems odd that the connector would by default reference a log path that does not exist.