[monitor:///var/rsyslog/*/fortigate/*/*/*.log] disabled = false index = idx_tin_firewall sourcetype = fortigate host_segment = 6