gitlab-org--gitlab-foss/spec/fixtures/lib/elasticsearch/query_with_start_time.json

49 lines
812 B
JSON

{
"query": {
"bool": {
"must": [
{
"match_phrase": {
"kubernetes.pod.name": {
"query": "production-6866bc8974-m4sk4"
}
}
},
{
"match_phrase": {
"kubernetes.namespace": {
"query": "autodevops-deploy-9-production"
}
}
}
],
"filter": [
{
"range": {
"@timestamp": {
"gte": "2019-12-13T14:35:34.034Z"
}
}
}
]
}
},
"sort": [
{
"@timestamp": {
"order": "desc"
}
},
{
"log.offset": {
"order": "desc"
}
}
],
"_source": [
"@timestamp",
"message",
"kubernetes.pod.name"
],
"size": 500
}