I tend to see most systems setup around 4 or 5 depending on how critical the device may be. That way you are getting (4)warning or (5)notice and more urgent syslog messages from the device. You can always set it to a 'noisier' level and determine if you want to step it back a severity level based on the amount of information and actionability of the messages being received.
↧