[monitor:///var/rsyslog/*/esxi/*/*/*.log] disabled = 0 index = vmware-esxilog sourcetype = vmw-syslog