anchor.diff:  
   The following are available options:
   
  -* `-b,--bootstrapConf <arg>` Existing Bootstrap Configuration file (required)
  -* `-d,--nifiInstallDir <arg>` NiFi Root Folder (required)
  -* `-p,--proxyDN <arg>` Proxy or User DN (required for secured nodes doing connect, disconnect and remove operations)
  -* `-o, --operation <arg>` Operations supported: status, connect (cluster), disconnect (cluster), remove (cluster)
  -* `-u,--clusterUrls <arg>` Comma delimited list of active urls for cluster (optional). Not required for disconnecting a node yet will be needed when connecting or removing from a cluster
  -* `-v,--verbose` Verbose messaging (optional)
  -* `-h,--help` Help Text (optional)
  +* `-b`,`--bootstrapConf <arg>`     Existing Bootstrap Configuration file (required)
  +* `-d`,`--nifiInstallDir <arg>`    NiFi Root Folder (required)
  +* `-h`,`--help`                    Help Text (optional)
  +* `-o`, `--operation <arg>`        Operations supported: status, connect (cluster), disconnect (cluster), remove (cluster)
  +* `-p`,`--proxyDN <arg>`           Proxy or User DN (required for secured nodes doing connect, disconnect and remove operations)
  +* `-u`,`--clusterUrls <arg>`       Comma delimited list of active urls for cluster (optional). Not required for disconnecting a node yet will be needed when connecting or removing from a cluster
  +* `-v`,`--verbose`                 Verbose messaging (optional)
  +
   
   Example usage on Linux:
   
  
positive.code: 
  You can use the following command line options with the ZooKeeper Migrator:
  
  * `-a,--auth <username:password>`               Allows the specification of a username and password for authentication with ZooKeeper.  This option is mutually exclusive with the `-k,--krb-conf` option.
  * `-f,--file <filename>`                        The file used for ZooKeeper data serialized as JSON.  When used with the `-r,--receive` option, data read from ZooKeeper will be stored in the given filename.  When used with the `-s,--send` option, the data in the file will be sent to ZooKeeper.
  * `-h,--help`                                   Prints help, displays available parameters with descriptions
  * `--ignore-source`                             Allows the ZooKeeper Migrator to write to the ZooKeeper and path from which the data was obtained.
  * `-k,--krb-conf <jaas-filename>`               Allows the specification of a JAAS configuration file to allow authentication with a ZooKeeper configured to use Kerberos.  This option is mutually exclusive with the `-a,--auth` option.
  * `-r,--receive`                                Receives data from ZooKeeper and writes to the given filename (if the `-f,--file` option is provided) or standard output. The data received will contain the full path to each node read from ZooKeeper. This option is mutually exclusive with the `-s,--send` option.
  * `-s,--send`                                   Sends data to ZooKeeper that is read from the given filename (if the `-f,--file` option is provided) or standard input. The paths for each node in the data being sent to ZooKeeper are absolute paths, and will be stored in ZooKeeper under the *path* portion of the `-z,--zookeeper` argument.  Typically, the *path* portion of the argument can be omitted, which will store the nodes at their absolute paths. This option is mutually exclusive with the `-r,--receive` option.
  * `-z,--zookeeper <zookeeper-endpoint>`         The ZooKeeper server(s) to use, specified by a connect string, comprised of one or more comma-separated host:port pairs followed by a path, in the format of _host:port[,host2:port...,hostn:port]/znode/path_.
  
  [[migrating_between_source_destination_zookeepers]]
  ==== Migrating Between Source and Destination ZooKeepers
  
negative.code: ^^^^^^^^^^
  Standalone mode is invoked by running `./bin/tls-toolkit.sh standalone -h` which prints the usage information along with descriptions of options that can be specified.
  
  You can use the following command line options with the `tls-toolkit` in standalone mode:
  
  * `-a`,`--keyAlgorithm <arg>`                   Algorithm to use for generated keys (default: `RSA`)
  * `-B`,`--clientCertPassword <arg>`             Password for client certificate. Must either be one value or one for each client DN (auto-generate if not specified)
  * `-c`,`--certificateAuthorityHostname <arg>`   Hostname of NiFi Certificate Authority (default: `localhost`)
  * `-C`,`--clientCertDn <arg>`                   Generate client certificate suitable for use in browser with specified DN (Can be specified multiple times)
  * `-d`,`--days <arg>`                           Number of days issued certificate should be valid for (default: `1095`)
  * `-f`,`--nifiPropertiesFile <arg>`             Base `nifi.properties` file to update (Embedded file identical to the one in a default NiFi install will be used if not specified)
  * `-g`,`--differentKeyAndKeystorePasswords`     Use different generated password for the key and the keystore
  * `-G`,`--globalPortSequence <arg>`             Use sequential ports that are calculated for all hosts according to the provided hostname expressions (Can be specified multiple times, MUST BE SAME FROM RUN TO RUN)
  * `-h`,`--help`                                 Print help and exit
  * `-k`,`--keySize <arg>`                        Number of bits for generated keys (default: `2048`)
  * `-K`,`--keyPassword <arg>`                    Key password to use. Must either be one value or one for each host (auto-generate if not specified)
  * `-n`,`--hostnames <arg>`                      Comma separated list of hostnames
  * `--nifiDnPrefix <arg>`                        String to prepend to hostname(s) when determining DN (default: `CN=`)
  * `--nifiDnSuffix <arg>`                        String to append to hostname(s) when determining DN (default: `, OU=NIFI`)
  * `-o`,`--outputDirectory <arg>`                The directory to output keystores, truststore, config files (default: `../bin`)
  * `-O`,`--isOverwrite`                          Overwrite existing host output
  * `-P`,`--trustStorePassword <arg>`             Keystore password to use. Must either be one value or one for each host (auto-generate if not specified)
  * `-s`,`--signingAlgorithm <arg>`               Algorithm to use for signing certificates (default: `SHA256WITHRSA`)
  * `-S`,`--keyStorePassword <arg>`               Keystore password to use. Must either be one value or one for each host (auto-generate if not specified)
  * `--subjectAlternativeNames <arg>`             Comma-separated list of domains to use as Subject Alternative Names in the certificate
  * `-T`,`--keyStoreType <arg>`                   The type of keystores to generate (default: `jks`)
  
  
  Hostname Patterns:
  
  * Square brackets can be used in order to easily specify a range of hostnames. Example: `[01-20]`
  * Parentheses can be used in order to specify that more than one NiFi instance will run on the given host(s). Example: `(5)`
  
  Examples:
  
  