[monitor:///var/rsyslog/*/linux/.../*.log]
whitelist=(\.log|log$|messages|secure|auth|mesg$|cron$|acpid$|\.out)
blacklist=(lastlog|anaconda\.syslog)
disabled = 0
host_segment = 6
index = idx_m-tic_linux
sourcetype = syslog