anchor.diff:  
   [source,shell]
   ----------------------------------------------------------------------
  -PS > Start-Service filebeat
  +PS C:\Program Files\Filebeat> Start-Service filebeat
   ----------------------------------------------------------------------
   
   By default, Windows log files are stored in `C:\ProgramData\filebeat\Logs`.
   
  -NOTE: On Windows, the statistics about system load and swap usage are currently
  -not captured.
  -
   Filebeat is now ready to send log files to your defined output.
   
   Enjoy!
  
positive.code: 
  ["source","sh",subs="attributes,callouts"]
  ----------------------------------------------------------------------
  PS > Invoke-WebRequest -Method Put -InFile filebeat.template.json -Uri http://localhost:9200/_template/filebeat?pretty
  ----------------------------------------------------------------------
  
  where `localhost:9200` is the IP and port where Elasticsearch is listening.
  
negative.code: . Download the Filebeat Windows zip file from the
  https://www.elastic.co/downloads/beats/filebeat[downloads page].
  
  . Extract the contents of the zip file into `C:\Program Files`.
  
  . Rename the `filebeat-<version>-windows` directory to `Filebeat`.
  
  . Open a PowerShell prompt as an Administrator (right-click the PowerShell icon and select *Run As Administrator*), and navigate to where you extracted the
  zip file.
  
  . Run the following commands to install Filebeat as a Windows service:
  +
  [source,shell]
  ----------------------------------------------------------------------
  PS > cd 'C:\Program Files\Filebeat'
  PS C:\Program Files\Filebeat> .\install-service-filebeat.ps1
  ----------------------------------------------------------------------
  
  Before starting Filebeat, you should look at the configuration options in the configuration
  file, for example `C:\Program Files\Filebeat\filebeat.yml`. For more information about these options,
  see <<filebeat-configuration-details>>.
  
  [[filebeat-configuration]]
  