anchor.diff:  $ oc new-app logging-fluentd-template
   ----
   
  -[[fluentd-secure-forward]]
  -*Configuring Fluentd to send logs to an external log aggregator*
  -
  -Fluentd can be configured to send a copy of its logs to an external log aggregator
  -that can understand messages from Fluentd. This allows the ability to send logs
  -to data stores other than Elasticsearch and enables the ability to further process
  -log records after the {product-title} Fluentd has processed them.
  -
  -The `secure-forward` plugin has been provided with the Fluentd image as of
  +[[fluentd-external-log-aggregator]]
  +*Configuring Fluentd to Send Logs to an External Log Aggregator*
  +
  +You can configure Fluentd to send a copy of its logs to an external log
  +aggregator, and not the default Elasticsearch, using the `secure-forward`
  +plug-in. From there, you can further process log records after the locally
  +hosted Fluentd has processed them.
  +
   ifdef::openshift-origin[]
  -v1.4.0.
  +The `secure-forward` plug-in is provided with the Fluentd image as of v1.4.0.
   endif::openshift-origin[]
  -ifdef::openshift-enterprise[]
  -3.4.0.
  -endif::openshift-enterprise[]
  -
  -Along with this, the deployer provides a `secure-forward.conf` section in the
  -Fluentd configmap that can be updated using `$ oc edit configmap/logging-fluentd`
  -for shipping logs to an external aggregator.
  -
  -An example secure-forward.conf:
  +
  +The deployer provides a `secure-forward.conf` section in the Fluentd configmap
  +for configuring the external aggregator:
   
   ----
   @type secure_forward
  
positive.code: and can be configured to use
  link:https://www.elastic.co/guide/en/logstash/current/plugins-inputs-tcp.html#ssl_enable[SSL].
  
  Further explanation of how to set up the `fluent-plugin-secure-forward` plugin can be
  link:https://github.com/tagomoris/fluent-plugin-secure-forward[found here].
  
  [[fluentd-throttling]]
  *Throttling logs in Fluentd*
  
negative.code: 
  [NOTE]
  ====
  The use of `ES_COPY` is being deprecated. To configure FluentD to send a copy of
  its logs to an external aggregator, use xref:fluentd-secure-forward[Fluentd
  Secure Forward] instead.
  ====
  
  You can configure Fluentd to send a copy of each log message to both the
  