local5.notice						/var/log/samba/samba_audit
local5.notice stop
