anchor.diff:  ------------------------------------------------
   
   [[mac]]
  -==== mac:
  +*mac:*
   
   ["source","sh",subs="attributes,callouts"]
   ------------------------------------------------
  
positive.code: 
  Run Filebeat by issuing the appropriate command for your platform.
  
  ==== deb:
  
  [source,shell]
  ----------------------------------------------------------------------
  sudo /etc/init.d/filebeat start
  ----------------------------------------------------------------------
  
  ==== rpm:
  
  [source,shell]
  ----------------------------------------------------------------------
  sudo /etc/init.d/filebeat start
  ----------------------------------------------------------------------
  
  ==== mac:
  
  [source,shell]
  ----------------------------------------------------------------------
  sudo ./filebeat -e -c filebeat.yml -d "publish"
  ----------------------------------------------------------------------
  
  ==== win:
  
  [source,shell]
  ----------------------------------------------------------------------
  
negative.code: ------------------------------------------------
  
  [[rpm]]
  *rpm:*
  
  ["source","sh",subs="attributes,callouts"]
  ------------------------------------------------
  