anchor.diff:      -
         paths:
           - /var/log/*.log
  -    fields:
  -      type: syslog
  +      fields:
  +        type: syslog
   output:
     elasticsearch:
       enabled: true
  
positive.code: ==== TLS is off by default
  
  If you follow the section on migrating the configuration you will have TLS
  enabled, but if you should be aware that if the tls section is missing from the
  configuration Filebeat uses an unencrypted connection to talk to Logstash.
  
  ==== Logging
  
negative.code: [[changed-configuration-options]]
  ==== Changed configuration file options
  
  With the refactoring of the configuration file, some options were also removed or renamed.
  Below is a list with the changed entries:
  
  [cols="2*", options="header"]
  |===
  