Add logstash query for bug #1229590