This article identifies the default syslog facility utilized by the vCenter Server Appliance (VCSA) for log transfer.
VMware vCenter Server
The default facility is local0.
Note: Changing this default facility are not publicly disclosed or officially supported.