diff --git a/docs/linux/fs-btrfs.md b/docs/linux/fs-btrfs.md
index fffe4c6..7de3cf0 100644
--- a/docs/linux/fs-btrfs.md
+++ b/docs/linux/fs-btrfs.md
@@ -1,7 +1,6 @@
 
 # Btrfs
 ### Snapshot
-
 #### Create shapshot
 ```bash
 btrfs subvolume snapshot xyz xyz-snapshot-path-name
@@ -50,3 +49,8 @@ btrfs filesystem defragment -v -clzo /boot/*
 ```bash
 chattr +c dir
 ```
+
+#### Create subvol
+```bash
+btrfs subvolume create /mnt/btrfs/subvol
+```
diff --git a/docs/linux/rsyslog.md b/docs/linux/rsyslog.md
index a133ae6..9b3291f 100644
--- a/docs/linux/rsyslog.md
+++ b/docs/linux/rsyslog.md
@@ -7,6 +7,10 @@
 $ModLoad imudp
 $UDPServerRun 514
 
+# timestamp     - alias for timereported
+# timereported  - timestamp from the message
+# timegenerated - timestamp when the message was RECEIVED
+
 	template(name="cmpDate" type="list") {
 		property(name="timereported" dateformat="year")
 		constant(value="-")