diff --git a/README.rst b/README.rst
index 26ba09f..c66fcb2 100644
--- a/README.rst
+++ b/README.rst
@@ -27,11 +27,42 @@
         format:
           name: TraditionalFormatWithPRI
           template: '"%syslogpriority% %syslogfacility% %timestamp:::date-rfc3339% %HOSTNAME% %syslogtag%%msg:::sp-if-no-1st-sp%%msg:::drop-last-lf%\n"'
-        file:
-          owner: root
-          group: root
-          createmode: 0640
-          umask: 0022
+        logfiles:
+          file:
+            -/var/log/syslog:
+              filter: *.*;auth,authpriv.none
+              owner: syslog
+              group: adm
+              createmode: 0640
+              umask: 0022
+            /var/log/auth.log:
+              filter: auth,authpriv.*
+              owner: syslog
+              group: adm
+              createmode: 0640
+              umask: 0022
+            -/var/log/kern.log:
+              filter: kern.*
+              owner: syslog
+              group: adm
+              createmode: 0640
+              umask: 0022
+           -/var/log/mail.log:
+              filter: mail.*
+              owner: syslog
+              group: adm
+              createmode: 0640
+              umask: 0022
+            /var/log/mail.err:
+              filter: mail.err
+              owner: syslog
+              group: adm
+              createmode: 0640
+              umask: 0022
+            ":omusrmsg:*":
+              filter: *.emerg
+            "|/dev/xconsole":
+              filter: "daemon.*;mail.*; news.err; *.=debug;*.=info;*.=notice;*.=warn":
 
 
 Read more