host = uschisecsm03 [fifo:///var/log/buffers/cisco] disabled = false host_segment = 2 sourcetype = cisco_syslog [fifo:///var/log/buffers/pix] disabled = false host_segment = 2 sourcetype = pix [fifo:///var/log/buffers/syslog] disabled = false host_segment = 2 sourcetype = syslog [fifo:///var/log/buffers/windows] disabled = false host_segment = 2 sourcetype = windows_snare_syslog