-auth,authpriv.* /var/log/auth.log
-cron.* -/var/log/user.log
-daemon.* -/var/log/daemon.log
-kern.* -/var/log/kern.log
-lpr.* -/var/log/lpr.log
-mail.* -/var/log/mail.log
-user.* -/var/log/user.log
+auth,authpriv.* /var/log/rsyslog/auth.log
+cron.* -/var/log/rsyslog/user.log
+daemon.* -/var/log/rsyslog/daemon.log
+kern.* -/var/log/rsyslog/kern.log
+lpr.* -/var/log/rsyslog/lpr.log
+mail.* -/var/log/rsyslog/mail.log
+user.* -/var/log/rsyslog/user.log