Uppercase OR to correct query

Fixes the query in the logstash provider.