[monitor:///var/rsyslog/*/linux/.../*.log] disabled = 0 host_segment = 6 index = idx_m-tic_linux sourcetype = syslog_linux