diff -Nur --no-dereference e-smith-proftpd-2.6.0.old/createlinks e-smith-proftpd-2.6.0/createlinks
--- e-smith-proftpd-2.6.0.old/createlinks	2021-03-03 15:32:34.016000000 -0500
+++ e-smith-proftpd-2.6.0/createlinks	2021-03-03 16:10:57.338000000 -0500
@@ -72,7 +72,9 @@
 
 my $event = 'e-smith-proftpd-update';
 safe_symlink("restart", "root/etc/e-smith/events/$event/services2adjust/ftp");
+safe_symlink("restart", "root/etc/e-smith/events/$event/services2adjust/rsyslog");
 templates2events("/etc/systemd/system-preset/49-koozali.preset", $event);
 event_link("systemd-reload", $event, "89");
+templates2events("/etc/rsyslog.conf", $event);
 
 exit 0;
diff -Nur --no-dereference e-smith-proftpd-2.6.0.old/root/etc/e-smith/templates/etc/rsyslog.conf/32proftpd e-smith-proftpd-2.6.0/root/etc/e-smith/templates/etc/rsyslog.conf/32proftpd
--- e-smith-proftpd-2.6.0.old/root/etc/e-smith/templates/etc/rsyslog.conf/32proftpd	1969-12-31 19:00:00.000000000 -0500
+++ e-smith-proftpd-2.6.0/root/etc/e-smith/templates/etc/rsyslog.conf/32proftpd	2021-03-03 16:09:34.644000000 -0500
@@ -0,0 +1,6 @@
+
+#proftpd
+if $programname == 'proftpd' and $syslogfacility-text == 'authpriv' then      /var/log/secure
+:programname, isequal, "proftpd"            /var/log/proftpd/proftpd.log
+& stop
+