$FileCreateMode 0640 $FileOwner root $FileGroup adm if $programname == 'snmpd' then /var/log/snmpd.log & stop