[monitor:///var/log/remote]
disabled = false
index = default
sourcetype = syslog
host_segment = 3