Now that we have a more descriptive fail message, we can use this as the new query:
message:"Unexpected number of images for" AND message:"test_create_backup; was the oldest backup not yet deleted? Image list:" and filename:"console.html"
http://logstash.openstack.org/#eyJzZWFyY2giOiJtZXNzYWdlOlwiVW5leHBlY3RlZCBudW1iZXIgb2YgaW1hZ2VzIGZvclwiIEFORCBtZXNzYWdlOlwidGVzdF9jcmVhdGVfYmFja3VwOyB3YXMgdGhlIG9sZGVzdCBiYWNrdXAgbm90IHlldCBkZWxldGVkPyBJbWFnZSBsaXN0OlwiIGFuZCBmaWxlbmFtZTpcImNvbnNvbGUuaHRtbFwiIiwiZmllbGRzIjpbXSwib2Zmc2V0IjowLCJ0aW1lZnJhbWUiOiIxNzI4MDAiLCJncmFwaG1vZGUiOiJjb3VudCIsInRpbWUiOnsidXNlcl9pbnRlcnZhbCI6MH0sInN0YW1wIjoxMzkwNjc0NTA3Mjg4fQ==
Now that we have a more descriptive fail message, we can use this as the new query:
message:"Unexpected number of images for" AND message: "test_create_ backup; was the oldest backup not yet deleted? Image list:" and filename: "console. html"
http:// logstash. openstack. org/#eyJzZWFyY2 giOiJtZXNzYWdlO lwiVW5leHBlY3Rl ZCBudW1iZXIgb2Y gaW1hZ2VzIGZvcl wiIEFORCBtZXNzY WdlOlwidGVzdF9j cmVhdGVfYmFja3V wOyB3YXMgdGhlIG 9sZGVzdCBiYWNrd XAgbm90IHlldCBk ZWxldGVkPyBJbWF nZSBsaXN0OlwiIG FuZCBmaWxlbmFtZ TpcImNvbnNvbGUu aHRtbFwiIiwiZml lbGRzIjpbXSwib2 Zmc2V0IjowLCJ0a W1lZnJhbWUiOiIx NzI4MDAiLCJncmF waG1vZGUiOiJjb3 VudCIsInRpbWUiO nsidXNlcl9pbnRl cnZhbCI6MH0sInN 0YW1wIjoxMzkwNj c0NTA3Mjg4fQ= =