anchor.diff:  The recommended template file is installed by the Filebeat packages. Load it with the
   following command:
   
  -deb or rpm:
  +==== deb or rpm:
   
   [source,shell]
   ----------------------------------------------------------------------
   curl -XPUT 'http://localhost:9200/_template/filebeat?pretty' -d@/etc/filebeat/filebeat.template.json
   ----------------------------------------------------------------------
   
  -mac:
  +==== mac:
   
   ["source","sh",subs="attributes,callouts"]
   ----------------------------------------------------------------------
   cd filebeat-{version}-darwin
   curl -XPUT 'http://localhost:9200/_template/filebeat?pretty' -d@filebeat.template.json
  +----------------------------------------------------------------------
  +
  +where `localhost:9200` is the IP and port where Elasticsearch is listening.
  +
  +==== win:
  +
  +["source","sh",subs="attributes,callouts"]
  +----------------------------------------------------------------------
  +PS > Invoke-WebRequest -Method Put -InFile filebeat.template.json -Uri http://localhost:9200/_template/filebeat?pretty
   ----------------------------------------------------------------------
   
   where `localhost:9200` is the IP and port where Elasticsearch is listening.
  
positive.code: 
  === Running Filebeat
  
  Run the binary by issuing the following command:
  
  deb:
  
  [source,shell]
  ----------------------------------------------------------------------
  sudo /etc/init.d/filebeat start
  ----------------------------------------------------------------------
  
  rpm:
  
  [source,shell]
  ----------------------------------------------------------------------
  sudo /etc/init.d/filebeat start
  ----------------------------------------------------------------------
  
  mac:
  
  [source,shell]
  ----------------------------------------------------------------------
  sudo ./filebeat -e -c filebeat.yml -d "publish"
  ----------------------------------------------------------------------
  
  Filebeat is now ready to send log files to your defined output.
  
  Enjoy!
  
negative.code: sudo dpkg -i filebeat_{version}_amd64.deb
  ------------------------------------------------
  
  [[rpm]]
  ==== rpm:
  
  ["source","sh",subs="attributes,callouts"]
  ------------------------------------------------
  