local5.=notice					-/var/log/smb_audit.log
local5.*;local5.!=notice			-{ "${messages}" }
