[monitor:///var/rsyslog/*/fortigate/*/*/*.log]
disabled = false
index = idx_tic_firewall
sourcetype = fortigate