diff --git a/queries/1286635.yaml b/queries/1286635.yaml
new file mode 100644
index 00000000..c1f25fb4
--- /dev/null
+++ b/queries/1286635.yaml
@@ -0,0 +1,4 @@
+query: >
+  message:"WARNING: The following packages cannot be authenticated"
+  AND (filename:console.html
+  OR filename:logs/devstacklog.txt)
\ No newline at end of file