[monitor:///var/rsyslog/*/juniper/*/*/*.log] disabled = false index = idx_tin_firewall sourcetype = juniper host_segment = 6