A Universal Forwarder has the following active stanza in inputs.conf: [monitor://var/log] disabled = 0 host = 488531552 An event from this input has a timestamp...