2020-04-08 14:13:33 +05:30
|
|
|
{
|
|
|
|
"query": {
|
|
|
|
"bool": {
|
|
|
|
"must": [
|
|
|
|
{
|
|
|
|
"match_phrase": {
|
|
|
|
"kubernetes.pod.name": {
|
|
|
|
"query": "production-6866bc8974-m4sk4"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"match_phrase": {
|
|
|
|
"kubernetes.namespace": {
|
|
|
|
"query": "autodevops-deploy-9-production"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"simple_query_string": {
|
|
|
|
"query": "foo +bar ",
|
|
|
|
"fields": [
|
|
|
|
"message"
|
|
|
|
],
|
|
|
|
"default_operator": "and"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
]
|
|
|
|
}
|
|
|
|
},
|
|
|
|
"sort": [
|
|
|
|
{
|
|
|
|
"@timestamp": {
|
|
|
|
"order": "desc"
|
|
|
|
}
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"offset": {
|
|
|
|
"order": "desc"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
],
|
|
|
|
"_source": [
|
|
|
|
"@timestamp",
|
2020-04-22 19:07:51 +05:30
|
|
|
"message",
|
|
|
|
"kubernetes.pod.name"
|
2020-04-08 14:13:33 +05:30
|
|
|
],
|
|
|
|
"size": 500
|
|
|
|
}
|