[root@svadmin02 ~]# cat /opt/splunk/etc/bundles/local/inputs.conf
host = svadmin02.blah.com


[tail:///var/log/messages]
disabled = false
host = svadmin02.blah.com

[udp://514]
disabled = false
sourcetype = syslog