)]}'
{"functions.sh":[{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"f11da850696af8eb4b94d4eafc008b18a42846a5","unresolved":false,"context_lines":[{"line_number":645,"context_line":"        # The journal contains everything running under systemd, we\u0027ll"},{"line_number":646,"context_line":"        # build an old school version of the syslog with just the"},{"line_number":647,"context_line":"        # kernel and sudo messages."},{"line_number":648,"context_line":"        sudo journalctl \\"},{"line_number":649,"context_line":"             -t kernel \\"},{"line_number":650,"context_line":"             -t sudo \\"},{"line_number":651,"context_line":"             --no-pager \\"}],"source_content_type":"text/x-sh","patch_set":1,"id":"5ff73747_83b4f036","line":648,"updated":"2017-05-03 17:34:40.000000000","message":"Hmm, this could break some of our elastic-recheck queries which are based on syslog, like the recent libvirt crash ones. We might want to scrub through the open e-r queries first before doing this.","commit_id":"3a21366743d6624fb5c51588fcdb26f818fbd8b5"},{"author":{"_account_id":2750,"name":"Sean Dague","email":"sean@dague.net","username":"sdague"},"change_message_id":"96090a125a518722b35d8842a4ba9726d62b171e","unresolved":false,"context_lines":[{"line_number":645,"context_line":"        # The journal contains everything running under systemd, we\u0027ll"},{"line_number":646,"context_line":"        # build an old school version of the syslog with just the"},{"line_number":647,"context_line":"        # kernel and sudo messages."},{"line_number":648,"context_line":"        sudo journalctl \\"},{"line_number":649,"context_line":"             -t kernel \\"},{"line_number":650,"context_line":"             -t sudo \\"},{"line_number":651,"context_line":"             --no-pager \\"}],"source_content_type":"text/x-sh","patch_set":1,"id":"3f044301_6218f2d2","line":648,"in_reply_to":"5ff73747_63e8c415","updated":"2017-05-03 20:26:03.000000000","message":"the segfault is being reported as \u0027kernel\u0027\n\nThat\u0027s the only one with active hits in the list. I think we can add others in if we see issues in the future that we think we want to fingerprint on.","commit_id":"3a21366743d6624fb5c51588fcdb26f818fbd8b5"},{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"5ebcffa6a5f063086759ff8fb12926b6c9888775","unresolved":false,"context_lines":[{"line_number":645,"context_line":"        # The journal contains everything running under systemd, we\u0027ll"},{"line_number":646,"context_line":"        # build an old school version of the syslog with just the"},{"line_number":647,"context_line":"        # kernel and sudo messages."},{"line_number":648,"context_line":"        sudo journalctl \\"},{"line_number":649,"context_line":"             -t kernel \\"},{"line_number":650,"context_line":"             -t sudo \\"},{"line_number":651,"context_line":"             --no-pager \\"}],"source_content_type":"text/x-sh","patch_set":1,"id":"5ff73747_63e8c415","line":648,"in_reply_to":"5ff73747_83b4f036","updated":"2017-05-03 17:35:21.000000000","message":"user@ubuntu:~/git/elastic-recheck$ grep -R syslog ./queries/\n./queries/1643911.yaml:  tags:\"syslog\"\n./queries/1638982.yaml:  tags:\"syslog.txt\"\n./queries/1646779.yaml:  tags: \"syslog\"\n./queries/1664727.yaml:  tags:\"syslog\" AND syslog_program:\"ironic-conductor\"\n./queries/1656850.yaml:  tags:\"syslog\"\n./queries/1656386.yaml:  message:\"oom-killer\" AND tags:syslog","commit_id":"3a21366743d6624fb5c51588fcdb26f818fbd8b5"}]}