anchor.diff:  
   *Winlogbeat*
   
  -- Fix invalid `event_id` on Windows XP and Windows 2003 {pull}1153[1153]
  -
   ==== Added
   
   *Affecting all Beats*
   
   - Update builds to Golang version 1.6
  -- Make Logstash output compression level configurable. {pull}630[630]
   - Add option to Elasticsearch output to pass http parameters in index operations {issue}805[805]
   - Improve Logstash and Elasticsearch backoff behavior. {pull}927[927]
   - Add experimental Kafka output. {pull}942[942]
   - Add config file option to configure GOMAXPROCS. {pull}969[969]
  -- Added a `fields` and `fields_under_root` as options available under the `shipper` configuration {pull}1092[1092]
  -- Ensure proper shutdown of libbeat. {pull}1075[1075]
  +- Improve shutdown handling in libbeat. {pull}1075[1075]
   - Add `fields` and `fields_under_root` options under the `shipper` configuration {pull}1092[1092]
   - Add the ability to use a SOCKS5 proxy with the Logstash output {issue}823[823]
   - The `-configtest` flag will now print "Config OK" to stdout on success {pull}1249[1249]
  
positive.code: *libbeat*
  
  - Run function to start a Beat now returns an error instead of directly exiting. {pull}771[771]
  - Some publisher options refactoring in libbeat {pull}684[684]
  - Move event preprocessor applying GeoIP to packetbeat {pull}772[772]
  - The method signature of HandleFlags() was changed to allow returning an error {pull}1249[1249]
  - Require braces for environment variable expansion in config files {pull}1304[1304]
  
  
negative.code: 
  - The `message_inserts` field was replaced with the `event_data` field {issue}1053[1053]
  - The `category` field was renamed to `task` to better align with the Windows Event Log API naming {issue}1053[1053]
  - Remove the count field from the exported event {pull}1218[1218]
  
  
  ==== Bugfixes
  
  *Affecting all Beats*
  
  - Logstash output will not retry events that are not JSON-encodable {pull}927[927]
  
  *Packetbeat*
  