[monitor:///var/rsyslog/*/fortigate/*/*/*.log]
disabled = false
index = idx_tih_firewall
sourcetype = fortigate