opendev/elastic-recheck
Code Issues Proposed changes

Remove false positives from query 1240256

Browse Source 
Logstash doesn't appear to do exact matching for " 503 " so expand
query.

Change-Id: I83b83020a62cc1d50eb2960c51c0c1bdc751bf57
This commit is contained in:
Joe Gordon 2014-03-10 18:27:15 -07:00
parent b7557ff079
commit 0fcc6ccb33
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
queries/1240256.yaml
View File

@ -1,4 +1,4 @@
query: >
message:" 503"
message:"HTTP/1.0 503"
AND filename:"logs/syslog.txt"
AND syslog_program:"proxy-server"