anchor.diff:  		<td>8081</td>
   	</tr>
   	<tr>
  -		<td>loggregator.doppler_port</td>
  -		<td>Port for outgoing doppler messages</td>
  -		<td>8081</td>
  -	</tr>
  -	<tr>
  -		<td>traffic_controller.outgoing_port  Port on which the traffic controller listens to for requests</td>
  -		<td>8080</td>
  -		<td></td>
  -	</tr>
  -	<tr>
  -		<td>traffic_controller.status.user</td>
  -		<td>username used to log into varz endpoint</td>
  -		<td></td>
  -	</tr>
  -	<tr>
  -		<td>traffic_controller.status.password</td>
  -		<td>password used to log into varz endpoint</td>
  -		<td></td>
  -	</tr>
  -	<tr>
  -		<td>traffic_controller.status.port</td>
  -		<td>port used to run the varz endpoint</td>
  -		<td>0</td>
  -	</tr>
  -	<tr>
  -		<td>doppler.uaa_client_id</td>
  -		<td>Doppler's client id to connect to UAA</td>
  -		<td>doppler</td>
  -	</tr>
  -	<tr>
  -		<td>uaa.clients.doppler.secret</td>
  -		<td>Doppler's client secret to connect to UAA
  -		<td></td>
  -	</tr>
  -	<tr>
  -		<td>uaa.url</td>
  -		<td>URL of UAA</td>
  -		<td></td>
  -	</tr>
  -	<tr>
  -		<td>uaa.no_ssl</td>
  -		<td>Do not use SSL to connect to UAA (used in case uaa.url is not set)</td>
  -		<td>false</td>
  +		<td>traffic_controller.security_event_logging.enabled</td>
  +		<td>Enable logging of all requests made to the Traffic Controller in CEF format</td>
  +		<td>false</td>
  +	</tr>
  +  <tr>
  +    <td>doppler.uaa_client_id</td
  +    <td>Doppler's client id to connect to UAA</td>
  +    <td>doppler</td>
  +  </tr>
  +  <tr>
  +    <td>uaa.clients.doppler.secret</td
  +    <td>Doppler's client secret to connect to UAA</td>
  +    <td></td>
  +  </tr>
  +  <tr>
  +    <td>uaa.url</td
  +    <td>URL of UAA</td>
  +    <td></td>
  +  </tr>
  +  <tr>
  +    <td>login.protocol</td
  +    <td>Protocol to use to connect to UAA (used in case uaa.url is not set)</td>
  +    <td>https</td>
  +  </tr>
  +  <tr>
  +    <td>loggregator.etcd.require_ssl</td>
  +    <td>Enable ssl for all communication with etcd</td>
  +    <td>false</td>
  +  </tr>
  +  <tr>
  +    <td>loggregator.etcd.machines</td>
  +    <td>IPs pointing to the ETCD cluster</td>
  +    <td></td>
  +  </tr>
  +  <tr>
  +    <td>loggregator.etcd.maxconcurrentrequests</td>
  +    <td>Number of concurrent requests to ETCD</td>
  +    <td>10</td>
  +  </tr>
  +  <tr>
  +    <td>loggregator.etcd.ca_cert</td>
  +    <td>PEM-encoded CA certificate</td>
  +    <td></td>
  +  </tr>
  +  <tr>
  +    <td>traffic_controller.etcd.client_cert</td>
  +    <td>PEM-encoded client certificate</td>
  +    <td></td>
  +  </tr>
  +  <tr>
  +    <td>traffic_controller.etcd.client_key</td>
  +    <td>PEM-encoded client key</td>
  +    <td></td>
  +  </tr>
  +  <tr>
  +    <td>system_domain</td>
  +    <td>Domain reserved for CF operator, base URL where the login, uaa, and other non-user apps listen</td>
  +    <td></td>
  +  </tr>
  +  <tr>
  +    <td>ssl.skip_cert_verify</td>
  +    <td>When connecting over https, ignore bad ssl certificates</td>
  +    <td>false</td>
  +  </tr>
  +  <tr>
  +    <td>cc.srv_api_uri</td>
  +    <td>API URI of cloud controller</td>
  +    <td></td>
  +  </tr>
  +</table>
  +
  +###  Metron Agent ###
  +
  +<table>
  +	<tr>
  +		<th><strong>Property Name</strong></th>
  +		<th><strong>Description</strong></th>
  +		<th><strong>Default</strong></th>
  +  </tr>
  +  <tr>
  +		<td>syslog_daemon_config.enable</td>
  +		<td>Enable or disable rsyslog configuration for forwarding syslog messages into metron</td>
  +		<td>true</td>
  +	</tr>
  +  <tr>
  +		<td>syslog_daemon_config.address</td>
  +		<td>IP address for syslog aggregator</td>
  +		<td></td>
  +	</tr>
  +	<tr>
  +		<td>syslog_daemon_config.port</td>
  +		<td>TCP port of syslog aggregator</td>
  +		<td></td>
  +	</tr>
  +	<tr>
  +		<td>syslog_daemon_config.transport</td>
  +		<td>Transport to be used when forwarding logs (tcp\|udp\|relp).</td>
  +		<td>tcp</td>
  +	</tr>
  +	<tr>
  +		<td>syslog_daemon_config.fallback_addresses</td>
  +		<td>Addresses of fallback servers to be used if the primary syslog server is down. Only tcp or relp are supported. Each list entry should consist of address, transport and port keys. </td>
  +		<td>[]</td>
  +	</tr>
  +	<tr>
  +		<td>syslog_daemon_config.custom_rule</td>
  +		<td>Custom rule for syslog forward daemon</td>
  +		<td></td>
  +	</tr>
  +	<tr>
  +		<td>syslog_daemon_config.max_message_size</td>
  +		<td>Maximum message size to be sent</td>
  +		<td>4k</td>
  +	</tr>
  +	<tr>
  +		<td>metron_endpoint.shared_secret</td>
  +		<td>Shared secret used to verify cryptographically signed dropsonde messages</td>
  +		<td></td>
  +	</tr>
  +	<tr>
  +		<td>metron_agent.listening_port</td>
  +		<td>Port the metron agent is listening on to receive dropsonde log messages</td>
  +    <td>3457</td>
  +	</tr>
  +	<tr>
  +		<td>metron_agent.listening_address</td>
  +		<td>Address the metron agent is listening on to receive dropsonde log messages provided for BOSH links and should not be overwritten</td>
  +		<td>127.0.0.1</td>
  +	</tr>
  +	<tr>
  +		<td>metron_agent.debug</td>
  +		<td>Boolean value to turn on verbose mode</td>
  +		<td>false</td>
  +	</tr>
  +	<tr>
  +		<td>metron_agent.protocols</td>
  +		<td>A priority list of protocols for metron to connect to doppler over.  Metron will refuse to connect to doppler over any protocol not in this list.</td>
  +		<td>["udp"]</td>
  +	</tr>
  +	<tr>
  +		<td>metron_agent.tls.client_cert</td>
  +		<td>TLS client certificate</td>
  +		<td></td>
  +	</tr>
  +	<tr>
  +		<td>metron_agent.tls.client_key</td>
  +		<td>TLS client key</td>
  +		<td></td>
  +	</tr>
  +	<tr>
  +		<td>metron_agent.tls.ca_cert</td>
  +		<td>CA root required for key/cert verification</td>
  +		<td></td>
  +	</tr>
  +	<tr>
  +		<td>metron_agent.zone</td>
  +		<td>Availability zone where this agent is running</td>
  +		<td></td>
  +	</tr>
  +	<tr>
  +		<td>metron_agent.deployment</td>
  +		<td>Name of deployment (added as tag on all outgoing metrics)
  +		<td></td>
  +	</tr>
  +	<tr>
  +		<td>metron_agent.tcp.batching_buffer_bytes</td>
  +		<td>The number of bytes which can be buffered prior to TCP writes (applies to TLS over TCP)</td>
  +		<td>10240</td>
  +	</tr>
  +	<tr>
  +		<td>metron_agent.tcp.batching_buffer_flush_interval_milliseconds</td>
  +		<td>The maximum time that a message can stay in the batching buffer before being flushed</td>
  +		<td>100</td>
  +	</tr>
  +	<tr>
  +		<td>metron_agent.logrotate.freq_min</td>
  +		<td>The frequency in minutes which logrotate will rotate VM logs</td>
  +		<td>5</td>
  +	</tr>
  +	<tr>
  +		<td>metron_agent.logrotate.rotate</td>
  +		<td>The number of files that logrotate will keep around on the VM</td>
  +		<td>7</td>
  +	</tr>
  +	<tr>
  +		<td>metron_agent.logrotate.size</td>
  +		<td>The size at which logrotate will decide to rotate the log file</td>
  +		<td>50M</td>
  +	</tr>
  +  <tr>
  +    <td>loggregator.etcd.require_ssl</td>
  +    <td>Enable ssl for all communication with etcd</td>
  +    <td>false</td>
  +	</tr>
  +  <tr>
  +    <td>loggregator.etcd.machines</td>
  +    <td>IPs pointing to the ETCD cluster</td>
  +    <td></td>
  +	</tr>
  +  <tr>
  +    <td>loggregator.etcd.maxconcurrentrequests</td>
  +    <td>Number of concurrent requests to ETCD</td>
  +    <td>10</td>
  +	</tr>
  +  <tr>
  +    <td>loggregator.etcd.ca_cert</td>
  +    <td>PEM-encoded CA certificate</td>
  +    <td></td>
  +	</tr>
  +  <tr>
  +    <td>metron_agent.etcd.client_cert</td>
  +    <td>PEM-encoded client certificate</td>
  +    <td></td>
  +	</tr>
  +  <tr>
  +    <td>metron_agent.etcd.client_key</td>
  +    <td>PEM-encoded client key</td>
  +    <td></td>
  +	</tr>
  +</table>
  +
  +### Syslog Drain Binder###
  +
  +See [Using Log Management Services](../../devguide/services/log-management.html).
  +
  +<table>
  +	<tr>
  +		<th><strong>Property Name</strong></th>
  +		<th><strong>Description</strong></th>
  +		<th><strong>Default</strong></th>
  +	</tr>
  +		<td>metron_endpoint.host</td>
  +		<td>The host used to emit messages to the Metron agent</td>
  +		<td>127.0.0.1</td>
   	</tr>
   	<tr>
   		<td>metron_endpoint.dropsonde_port</td>
  
positive.code: 		<td>120</td>
  	</tr>
  	<tr>
  		<td> doppler.unmarshaller_count</td>
  		<td>Number of parallel unmarshallers to run within Doppler</td>
  		<td>5</td>
  	</tr>
  
negative.code: 		<td>syslog_drain_binder.debug</td>
  		<td>boolean value to turn on verbose logging for syslog_drain_binder</td>
  		<td>false</td>
    </tr>
    <tr>
      <td>syslog_drain_binder.locked_memory_limit</td>
      <td>Size (KB) of shell's locked memory limit. Set to 'kernel' to use the kernel's default. Non-numeric values other than 'kernel', 'soft', 'hard', and 'unlimited' will result in an error.</td>
      <td>unlimited</td>
    </tr>
  	<tr>
  		<td>cc.bulk_api_password</td>
  		<td>password for the bulk api</td>
  