diff --git a/vars/Debian.yml b/vars/Debian.yml
index 4724a77..7ff7aab 100644
--- a/vars/Debian.yml
+++ b/vars/Debian.yml
@@ -3,6 +3,6 @@
 rsyslog_package_names: 
   - rsyslog
 rsyslog_service_name: rsyslog
-rsyslog_file_owner: syslog
+rsyslog_file_owner: root
 rsyslog_file_group: adm
 rsyslog_os_supported: yes
diff --git a/vars/Ubuntu.yml b/vars/Ubuntu.yml
new file mode 100644
index 0000000..bce89e6
--- /dev/null
+++ b/vars/Ubuntu.yml
@@ -0,0 +1,8 @@
+# Ubuntu Family OS defaults
+---
+rsyslog_package_names: 
+  - rsyslog
+rsyslog_service_name: rsyslog
+rsyslog_file_owner: syslog
+rsyslog_file_group: adm
+rsyslog_os_supported: yes