[monitor:///var/rsyslog/*/linux/.../*.log] disabled = 0 host_segment = 6 index = idx_m-tih_linux sourcetype = syslog