[monitor:///var/rsyslog/*/juniper/*/*/*.log]
disabled = false
index = idx_tic_firewall
sourcetype = juniper