anchor.diff:  # reached within output_flush_interval seconds, everything that is available will be flushed at once. Remember
   # that every outputbuffer processor manages its own batch and performs its own batch write calls.
   # ("outputbuffer_processors" variable)
  -output_batch_size = 25
  +output_batch_size = 500
   
   # Flush interval (in seconds) for the Elasticsearch output. This is the maximum amount of time between two
   # batches of messages written to Elasticsearch. It is only effective at all if your minimum number of messages
   # for this time period is less than output_batch_size * outputbuffer_processors.
   output_flush_interval = 1
  +
  +# As stream outputs are loaded only on demand, an output which is failing to initialize will be tried over and
  +# over again. To prevent this, the following configuration options define after how many faults an output will
  +# not be tried again for an also configurable amount of seconds.
  +output_fault_count_threshold = 5
  +output_fault_penalty_seconds = 30
   
   # The number of parallel running processors.
   # Raise this number if your buffers are filling up.
  
positive.code: 
  # Enable collection of Graylog-related metrics into MongoDB
  #enable_metrics_collection = false
  
negative.code: # and put the resulting hash value into the following line
  root_password_sha2 = <%= Graylog['graylog_server']['admin_password'] %>
  
  # The email address of the root user.
  # Default is empty
  #root_email = ""
  
  # The time zone setting of the root user.
  # Default is UTC
  root_timezone = <%= Graylog['timezone'] %>
  