[monitor:///var/rsyslog/*/cisco/.../*.log]
disabled = false
index = idx_m-tic_cisco
sourcetype = cisco