anchor.diff:  
   # REST API transport address. Defaults to the value of rest_listen_uri. Exception: If rest_listen_uri
   # is set to a wildcard IP address (0.0.0.0) the first non-loopback IPv4 system address is used.
  -# This will be promoted in the cluster discovery APIs and other nodes may try to connect on this
  -# address. (see rest_listen_uri)
  +# If set, his will be promoted in the cluster discovery APIs, so other nodes may try to connect on
  +# this address and it is used to generate URLs addressing entities in the REST API. (see rest_listen_uri)
  +# You will need to define this, if your Graylog server is running behind a HTTP proxy that is rewriting
  +# the scheme, host name or URI.
   #rest_transport_uri = http://192.168.1.1:12900/
   
   # Enable CORS headers for REST api. This is necessary for JS-clients accessing the server directly.
  
positive.code: # overall round trip times. This is disabled by default. Uncomment the next line to enable it.
  #rest_enable_gzip = true
  
  # Embedded Elasticsearch configuration file
  # pay attention to the working directory of the server, maybe use an absolute path here
  #elasticsearch_config_file = /etc/graylog-elasticsearch.yml
  
  # (Approximate) maximum number of documents in an Elasticsearch index before a new index
  # is being created, also see no_retention and elasticsearch_max_number_of_indices.
  elasticsearch_max_docs_per_index = 20000000
  
  # Disable message retention on this node, i. e. disable Elasticsearch index rotation.
  #no_retention = false
  
  # How many indices do you want to keep?
  # elasticsearch_max_number_of_indices*elasticsearch_max_docs_per_index=total number of messages in your setup
  elasticsearch_max_number_of_indices = 20
  
  # Decide what happens with the oldest indices when the maximum number of indices is reached.
  
negative.code: # and put the resulting hash value into the following line
  root_password_sha2 = <%= Graylog['graylog_server']['admin_password'] %>
  
  # The email address of the root user.
  # Default is empty
  #root_email = ""
  
  # The time zone setting of the root user.
  # Default is UTC
  root_timezone = <%= Graylog['timezone'] %>
  