anchor.diff:  # and put the resulting hash value into the following line
   root_password_sha2 = <%= Graylog['graylog_server']['admin_password'] %>
   
  +# The email address of the root user.
  +# Default is empty
  +#root_email = ""
  +
   # The time zone setting of the root user.
   # Default is UTC
   root_timezone = <%= Graylog['timezone'] %>
  
positive.code: # For optimum performance your LogMessage objects in the ring buffer should fit in your CPU L3 cache.
  # Start server with --statistics flag to see buffer utilization.
  # Must be a power of 2. (512, 1024, 2048, ...)
  ring_size = 1024
  
  # EXPERIMENTAL: Dead Letters
  # Every failed indexing attempt is logged by default and made visible in the web-interface. You can enable
  
negative.code: # reached within output_flush_interval seconds, everything that is available will be flushed at once. Remember
  # that every outputbuffer processor manages its own batch and performs its own batch write calls.
  # ("outputbuffer_processors" variable)
  output_batch_size = 500
  
  # Flush interval (in seconds) for the Elasticsearch output. This is the maximum amount of time between two
  # batches of messages written to Elasticsearch. It is only effective at all if your minimum number of messages
  # for this time period is less than output_batch_size * outputbuffer_processors.
  output_flush_interval = 1
  
  # As stream outputs are loaded only on demand, an output which is failing to initialize will be tried over and
  # over again. To prevent this, the following configuration options define after how many faults an output will
  # not be tried again for an also configurable amount of seconds.
  output_fault_count_threshold = 5
  output_fault_penalty_seconds = 30
  
  # The number of parallel running processors.
  # Raise this number if your buffers are filling up.
  