anchor.diff:  
   where `localhost:9200` is the IP and port where Elasticsearch is listening.
   
  -==== win:
  +*win:*
   
   ["source","sh",subs="attributes,callouts"]
   ----------------------------------------------------------------------
  
positive.code: https://www.elastic.co/downloads/beats/packetbeat[download page].
  
  [[deb]]
  ==== deb:
  
  ["source","sh",subs="attributes,callouts"]
  ----------------------------------------------------------------------
  
negative.code: The recommended template file is installed by the Packetbeat packages. Load it with the
  following command:
  
  *deb or rpm:*
  
  [source,shell]
  ----------------------------------------------------------------------
  curl -XPUT 'http://localhost:9200/_template/packetbeat' -d@/etc/packetbeat/packetbeat.template.json
  ----------------------------------------------------------------------
  
  *mac:*
  
  [source,shell]
  ----------------------------------------------------------------------
  