indexes:
  - logstash-2018.02.09
  - logstash-2018.02.10
  - logstash-2018.02.11
  - logstash-2018.02.12

size: 100
from: 0
_source:
  - message
  - swh_logging_args_args
  - swh_logging_args_exc
  - swh_logging_args_kwargs
query:
  bool:
    must:
    - match:
        systemd_unit.keyword:
          query: 'swh-worker@swh_loader_mercurial.service'
    - term:
        priority: '3'
    must_not:
    - match:
        message:
          query: '[.*] consumer: Cannot connect to amqp.*'
    - match:
        message:
          query: '[.*] pidbox command error.*'

sort:
- '@timestamp': 'asc'