anchor.diff:  
       # Optional HTTP Path
       path: "/elasticsearch"
  +
  +    # List of root certificates for HTTPS server verifications
  +    cas: ["/etc/pki/root/ca.pem"]
  +
  +    # Certificate for TLS client authentication
  +    certificate: "/etc/pki/client/cert.pem"
  +
  +    # Client Certificate Key
  +    certificatekey: "/etc/pki/client/cert.key"
  +
   ------------------------------------------------------------------------------
   
   
  
positive.code: Boolean that sets if the topology is kept in Elasticsearch. The default is
  false. This option makes sense only for Packetbeat.
  
  ==== topology_expire
  
  The time to live in seconds for the topology information that is stored in
  Elasticsearch. The default is 15 seconds.
  
  [[redis-output]]
  ==== Redis Output
  
negative.code: The index root name where to write events to. The default is `packetbeat` and
  generates `[packetbeat-]YYYY.MM.DD` indexes (e.g. `packetbeat-2015.04.26`).
  
  ===== max_retries
  
  The number of times a particular Elasticsearch index operation is attempted. If
  the indexing operation doesn't succeed after this many retries, the events are
  dropped. The default is 3.
  
  ===== bulk_max_size
  
  The maximum number of events to bulk in a single Elasticsearch bulk API index request.
  The default is 10000.
  
  ===== flush_interval
  
  The number of seconds to wait for new events between two bulk API index requests.
  If `bulk_max_size` is reached before this interval expires, addition bulk index
  