anchor.diff:  
         filterConfig = ''
           if [@metadata][beat] {
  +          mutate { remove_field => [ "type" ] }
             mutate { add_field => { "type" => "%{[@metadata][beat]}" } }
           }
         '';
  
positive.code: 
      elasticsearch = {
        enable = true;
        package = pkgs.elasticsearch7-oss;
      };
  
  
negative.code:   ip_ap = "10.0.0.3";
    ip_imac_wifi = "10.0.10.1";
    ip_imac_eth = "10.0.10.2";
    ip_nas = "10.0.0.32";
    ip_pine = "10.0.10.10";
    ip_raspi4 = "10.0.10.38";
    ip_ux305c = "10.0.10.3";
  in {
    imports = [ ./6910p-hardware.nix ./6910p-secrets.nix ./modules/packetbeat.nix ];
  
    boot = {
      cleanTmpDir = true;
  