[monitor:///var/rsyslog/*/juniper/*/*/*.log]
disabled = false
index = idx_tih_firewall
sourcetype = juniper