diff --git a/queries/1253482.yaml b/queries/1253482.yaml
index 3814c600..111a7dea 100644
--- a/queries/1253482.yaml
+++ b/queries/1253482.yaml
@@ -1,3 +1,4 @@
 query: >
-  message:(+"[ERROR]" +"devstack/lib/keystone" +"keystone did not start")
-  AND filename:console.html
+  loglevel:"CRITICAL"
+  AND message:"Address already in use"
+  AND filename:logs*screen-key.txt