[monitor:///var/rsyslog/*/fortigate/*/*/*.log] disabled = false index = idx_fortigate sourcetype = fortigate