diff --git a/README.md b/README.md
index ce905d4..5a273b3 100644
--- a/README.md
+++ b/README.md
@@ -8,11 +8,11 @@ file = /var/log/messages
 buffer_duration = 5000
 log_stream_name = {hostname}
 initial_position = start_of_file
-log_group_name = /var/log/messages
+log_group_name = linux-syslog
 ```
 
 ## requirements
-instances need the following permissions:
+instances need the following cloudwatch log permissions. Create a policy with these privileges and attach as instance role
 - CreateLogStream
 - DescribeLogStreams
 - CreateLogGroup
diff --git a/templates/awslogs.conf b/templates/awslogs.conf
index dea36c4..c2d4572 100644
--- a/templates/awslogs.conf
+++ b/templates/awslogs.conf
@@ -128,5 +128,5 @@ file = /var/log/messages
 buffer_duration = 5000
 log_stream_name = {hostname}
 initial_position = start_of_file
-log_group_name = /var/log/messages
+log_group_name = linux-syslog