Typical syslog and related logging systems implement a level system that address individual message context. However, logging usually has multiple contexts. (a)The framework, (b)the internal diagnostics [the application ping], © the application’s transactions.
As sort of a best practice; if you’re using syslog etc… then open multiple connections/categories. One per application context. And when you’re “transactions” make certain to use a UUID or transaction id with EVERY single message so that you can aggregate the messages.