input: linux_rsyslog_syslog: engine: logstreamer log_directory: /var/log file_match: syslog\.?(?P\d+)?(.gz)? priority: ["^Index"] decoder: RsyslogDecoder linux_rsyslog_auth: engine: logstreamer log_directory: /var/log file_match: auth\.log\.?(?P\d+)?(.gz)? priority: ["^Index"] decoder: RsyslogDecoder linux_rsyslog_kern: engine: logstreamer log_directory: /var/log file_match: kern\.log\.?(?P\d+)?(.gz)? priority: ["^Index"] decoder: RsyslogDecoder