anchor.diff:      <th><strong>Default</strong></th>
     <tr>
       <td>traffic_controller.debug</td>
  -    <td>boolean value to turn on verbose logging for loggregator system (dea agent &amp; loggregator server)</td>
  -    <td>false</td>
  +    <td>Boolean value to enable verbose logging for DEA agent and Loggregator server (the Loggregator system)</td>
  +    <td><code>false</code></td>
     </tr>
     <tr>
       <td>traffic_controller.disable_access_control</td>
  -    <td>Traffic controller bypasses authentication with the UAA and CC</td>
  -    <td>false</td>
  +    <td>Boolean value to set Traffic Controller to bypasses authentication with the UAA and Cloud Controller</td>
  +    <td><code>false</code></td>
     </tr>
     <tr>
       <td>traffic_controller.locked_memory_limit</td>
  -    <td>Size (KB) of shell's locked memory limit. Set to 'kernel' to use the kernel's default. Non-numeric values other than 'kernel', 'soft', 'hard', and 'unlimited' will result in an error.</td>
  -    <td>unlimited</td>
  +    <td>Shell's locked memory limit size. Accepts numeric values interpreted as KsB, or the following non-numeric values: <code>kernel</code>, <code>soft</code>, <code>hard</code>, <code>unlimited</code>. <code>kernel</code> sets limit to the kernel's default.</td>
  +    <td><code>unlimited</code></td>
     </tr>
     <tr>
       <td>loggregator.outgoing_dropsonde_port</td>
       <td>Port for outgoing dropsonde messages</td>
  -    <td>8081</td>
  +    <td><code>8081</code></td>
     </tr>
     <tr>
       <td>traffic_controller.security_event_logging.enabled</td>
  -    <td>Enable logging of all requests made to the Traffic Controller in CEF format</td>
  -    <td>false</td>
  +    <td>Boolean value to enable logging of all requests made to the Traffic Controller in CEF format</td>
  +    <td><code>false</code></td>
     </tr>
     <tr>
       <td>doppler.uaa_client_id</td>
       <td>Doppler's client id to connect to UAA</td>
  -    <td>doppler</td>
  +    <td><code>doppler</code></td>
     </tr>
     <tr>
       <td>uaa.clients.doppler.secret</td>
       <td>Doppler's client secret to connect to UAA</td>
  -    <td></td>
  +    <td>no default</td>
     </tr>
     <tr>
       <td>uaa.url</td>
       <td>URL of UAA</td>
  -    <td></td>
  +    <td>no default</td>
     </tr>
     <tr>
       <td>login.protocol</td>
  -    <td>Protocol to use to connect to UAA (used in case uaa.url is not set)</td>
  -    <td>https</td>
  +    <td>Protocol to use to connect to UAA if uaa.url is not set</td>
  +    <td><code>https</code></td>
     </tr>
     <tr>
       <td>loggregator.etcd.require_ssl</td>
  -    <td>Enable ssl for all communication with etcd</td>
  -    <td>false</td>
  +    <td>Enable SSL for all communication with ETCD</td>
  +    <td><code>false</code></td>
     </tr>
     <tr>
       <td>loggregator.etcd.machines</td>
  -    <td>IPs pointing to the ETCD cluster</td>
  -    <td></td>
  +    <td>IP addresses pointing to the ETCD cluster</td>
  +    <td>no default</td>
     </tr>
     <tr>
       <td>loggregator.etcd.maxconcurrentrequests</td>
  -    <td>Number of concurrent requests to ETCD</td>
  -    <td>10</td>
  +    <td>Maximum number of concurrent requests to ETCD</td>
  +    <td><code>10</code></td>
     </tr>
     <tr>
       <td>loggregator.etcd.ca_cert</td>
       <td>PEM-encoded CA certificate</td>
  -    <td></td>
  +    <td>no default</td>
     </tr>
     <tr>
       <td>traffic_controller.etcd.client_cert</td>
       <td>PEM-encoded client certificate</td>
  -    <td></td>
  +    <td>no default</td>
     </tr>
     <tr>
       <td>traffic_controller.etcd.client_key</td>
       <td>PEM-encoded client key</td>
  -    <td></td>
  +    <td>no default</td>
     </tr>
     <tr>
       <td>traffic_controller.pprof_port</td>
  -    <td>The pprof port for runtime profiling data</td>
  -    <td>6060</td>
  +    <td>pprof port for runtime profiling data</td>
  +    <td><code>6060</code></td>
     </tr>
     <tr>
       <td>system_domain</td>
  -    <td>Domain reserved for CF operator, base URL where the login, uaa, and other non-user apps listen</td>
  -    <td></td>
  +    <td>Domain reserved for Cloud Foundry operator, and the base URL where login, UAA, and other non-user apps listen</td>
  +    <td>no default</td>
     </tr>
     <tr>
       <td>ssl.skip_cert_verify</td>
  -    <td>When connecting over https, ignore bad ssl certificates</td>
  -    <td>false</td>
  +    <td>Boolean value to ignore bad SSL certificates when connecting over https</td>
  +    <td><code>false</code></td>
     </tr>
     <tr>
       <td>cc.srv_api_uri</td>
  -    <td>API URI of cloud controller</td>
  -    <td></td>
  +    <td>API URI of Cloud Controller</td>
  +    <td>no default</td>
     </tr>
   </table>
   
  
positive.code:   </tr>
    <tr>
      <td>syslog_daemon_config.enable</td>
      <td>Enable or disable rsyslog configuration for forwarding syslog messages into metron</td>
      <td>true</td>
    </tr>
    <tr>
      <td>syslog_daemon_config.address</td>
      <td>IP address for syslog aggregator</td>
      <td></td>
    </tr>
    <tr>
      <td>syslog_daemon_config.port</td>
      <td>TCP port of syslog aggregator</td>
      <td></td>
    </tr>
    <tr>
      <td>syslog_daemon_config.transport</td>
      <td>Transport to be used when forwarding logs (tcp\|udp\|relp).</td>
      <td>tcp</td>
    </tr>
    <tr>
      <td>syslog_daemon_config.fallback_addresses</td>
      <td>Addresses of fallback servers to be used if the primary syslog server is down. Only tcp or relp are supported. Each list entry should consist of address, transport and port keys. </td>
      <td>[]</td>
    </tr>
    <tr>
      <td>syslog_daemon_config.custom_rule</td>
      <td>Custom rule for syslog forward daemon</td>
      <td></td>
    </tr>
    <tr>
      <td>syslog_daemon_config.max_message_size</td>
      <td>Maximum message size to be sent</td>
      <td>4k</td>
    </tr>
    <tr>
      <td>metron_endpoint.shared_secret</td>
      <td>Shared secret used to verify cryptographically signed dropsonde messages</td>
      <td></td>
    </tr>
    <tr>
      <td>metron_agent.listening_port</td>
      <td>Port the metron agent is listening on to receive dropsonde log messages</td>
      <td>3457</td>
    </tr>
    <tr>
      <td>metron_agent.listening_address</td>
      <td>Address the metron agent is listening on to receive dropsonde log messages provided for BOSH links and should not be overwritten</td>
      <td>127.0.0.1</td>
    </tr>
    <tr>
      <td>metron_agent.debug</td>
      <td>Boolean value to turn on verbose mode</td>
      <td>false</td>
    </tr>
    <tr>
      <td>metron_agent.protocols</td>
      <td>A priority list of protocols for metron to connect to doppler over.  Metron will refuse to connect to doppler over any protocol not in this list.</td>
      <td>["udp"]</td>
    </tr>
    <tr>
      <td>metron_agent.tls.client_cert</td>
      <td>TLS client certificate</td>
      <td></td>
    </tr>
    <tr>
      <td>metron_agent.tls.client_key</td>
      <td>TLS client key</td>
      <td></td>
    </tr>
    <tr>
      <td>metron_agent.tls.ca_cert</td>
      <td>CA root required for key/cert verification</td>
      <td></td>
    </tr>
    <tr>
      <td>metron_agent.zone</td>
      <td>Availability zone where this agent is running</td>
      <td></td>
    </tr>
    <tr>
      <td>metron_agent.deployment</td>
      <td>Name of deployment (added as tag on all outgoing metrics)
      <td></td>
    </tr>
    <tr>
      <td>metron_agent.tcp.batching_buffer_bytes</td>
      <td>The number of bytes which can be buffered prior to TCP writes (applies to TLS over TCP)</td>
      <td>10240</td>
    </tr>
    <tr>
      <td>metron_agent.tcp.batching_buffer_flush_interval_milliseconds</td>
      <td>The maximum time that a message can stay in the batching buffer before being flushed</td>
      <td>100</td>
    </tr>
    <tr>
      <td>metron_agent.logrotate.freq_min</td>
      <td>The frequency in minutes which logrotate will rotate VM logs</td>
      <td>5</td>
    </tr>
    <tr>
      <td>metron_agent.logrotate.rotate</td>
      <td>The number of files that logrotate will keep around on the VM</td>
      <td>7</td>
    </tr>
    <tr>
      <td>metron_agent.logrotate.size</td>
      <td>The size at which logrotate will decide to rotate the log file</td>
      <td>50M</td>
    </tr>
    <tr>
      <td>loggregator.etcd.require_ssl</td>
      <td>Enable ssl for all communication with etcd</td>
      <td>false</td>
    </tr>
    <tr>
      <td>loggregator.etcd.machines</td>
      <td>IPs pointing to the ETCD cluster</td>
      <td></td>
    </tr>
    <tr>
      <td>loggregator.etcd.maxconcurrentrequests</td>
      <td>Number of concurrent requests to ETCD</td>
      <td>10</td>
    </tr>
    <tr>
      <td>loggregator.etcd.ca_cert</td>
      <td>PEM-encoded CA certificate</td>
      <td></td>
    </tr>
    <tr>
      <td>metron_agent.etcd.client_cert</td>
      <td>PEM-encoded client certificate</td>
      <td></td>
    </tr>
    <tr>
      <td>metron_agent.etcd.client_key</td>
      <td>PEM-encoded client key</td>
      <td></td>
    </tr>
    <tr>
      <td>metron_agent.pprof_port</td>
      <td>The pprof port for runtime profiling data</td>
      <td>6061</td>
    </tr>
  </table>
  
  
negative.code:     <th><strong>Default</strong></th>
    </tr>
      <td>metron_endpoint.host</td>
      <td>Host used to emit messages to the Metron agent</td>
      <td><code>127.0.0.1</code></td>
    </tr>
    <tr>
      <td>metron_endpoint.dropsonde_port</td>
      <td>Port used to emit dropsonde messages to the Metron agent</td>
      <td><code>3457</code></td>
    </tr>
    <tr>
      <td>loggregator.etcd.require_ssl</td>
      <td>Boolean value to enable SSL for all communication with ETCD</td>
      <td><code>false</code></td>
    </tr>
    <tr>
      <td>loggregator.etcd.machines</td>
      <td>IP addresses pointing to the ETCD cluster</td>
      <td>no default</td>
    </tr>
    <tr>
      <td>loggregator.etcd.maxconcurrentrequests</td>
      <td>Maximum number of concurrent requests to ETCD</td>
      <td><code>10</code></td>
    </tr>
    <tr>
      <td>loggregator.etcd.ca_cert</td>
      <td>PEM-encoded CA certificate</td>
      <td>no default</td>
    </tr>
    <tr>
      <td>syslog_drain_binder.etcd.client_cert</td>
      <td>PEM-encoded client certificate</td>
      <td>no default</td>
    </tr>
    <tr>
      <td>syslog_drain_binder.etcd.client_key</td>
      <td>PEM-encoded client key</td>
      <td>no default</td>
    </tr>
    <tr>
      <td>system_domain</td>
      <td>Domain reserved for Cloud Foundry operator, and the base URL where login, UAA, and other non-user apps listen </td>
      <td>no default</td>
    </tr>
    <tr>
      <td>syslog_drain_binder.drain_url_ttl_seconds</td>
      <td>Time to live (TTL), in seconds, for drain URLs</td>
      <td><code>60</code></td>
    </tr>
    <tr>
      <td>syslog_drain_binder.update_interval_seconds</td>
      <td>Interval, in seconds, on which to poll Cloud Controller</td>
      <td><code>15</code></td>
    </tr>
    <tr>
      <td>syslog_drain_binder.polling_batch_size</td>
      <td>Batch size for the poll from Cloud Controller</td>
      <td><code>1000</code></td>
    </tr>
    <tr>
      <td>syslog_drain_binder.debug</td>
      <td>Boolean value to enable verbose logging for syslog_drain_binder</td>
      <td><code>false</code></td>
    </tr>
    <tr>
      <td>syslog_drain_binder.locked_memory_limit</td>
      <td>Shell's locked memory limit size. Accepts numeric values interpreted as KsB, or the following non-numeric values: <code>kernel</code>, <code>soft</code>, <code>hard</code>, <code>unlimited</code>. <code>kernel</code> sets limit to the kernel's default.</td>
      <td><code>unlimited</code></td>
    </tr>
    <tr>
      <td>cc.bulk_api_password</td>
      <td>Password for the bulk API</td>
      <td>no default</td>
    </tr>
    <tr>
      <td>cc.srv_api_uri</td>
      <td>API URI of Cloud Controller</td>
      <td>no default</td>
    </tr>
    <tr>
      <td>ssl.skip_cert_verify</td>
      <td>Boolean value to ignore bad SSL certificates when connecting over https</td>
      <td><code>false</code></td>
    </tr>
  </table>
  