[monitor:///var/rsyslog/*/fortigate/*/*/*.log]
disabled = false
index = idx_tit_firewall
sourcetype = fortigate