Examples of the disclosure enable messages, such as syslog messages, rsyslog messages, and/or syslog-ng messages, to be efficiently and effectively routed. In some examples, it is determined whether a transmitting device associated with a message is associated with one or more device classes. Upon determining that the transmitting device is not associated with one or more device classes, the transmitting device is associated with a device class, and a rule set for determining whether the transmitting device is associated with one or more device classes is updated. A recipient for the message is identified, such that the message is configured to be accurately routed to the recipient. Examples of the disclosure manage messages to increase system functionality, increase speed, conserve memory, reduce processor load, increase communication reliability, and/or reduce communication error rate.