_raw /var/syslog-ng/syslog_fifo syslog master default False True $$SPLUNK_HOME]]/etc/datetime.xml $$SPLUNK_HOME]]/var/lib/splunk/rules.txt False True True 1 2003 2010 $$SPLUNK_HOME]]/etc/hostTimeOffsetMap.xml 150 $$SPLUNK_HOME]]/etc/custom-typers/syslog.typer.xml indexQueue