From 1d1121f111748ef90538318719b09cb3c51226e1 Mon Sep 17 00:00:00 2001
From: Ronelle Landy <rlandy@redhat.com>
Date: Thu, 8 Aug 2019 15:25:17 -0400
Subject: [PATCH] Add query for UNAUTHORIZED error when pulling containers

Change-Id: I2cd1203bd7fb7747b774458a6c2a1f4398ac279b
Related-Bug: #1839532
---
 queries/1839532.yaml | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 queries/1839532.yaml

diff --git a/queries/1839532.yaml b/queries/1839532.yaml
new file mode 100644
index 00000000..5e500868
--- /dev/null
+++ b/queries/1839532.yaml
@@ -0,0 +1,4 @@
+query: >-
+  message:"Action\":\"pull" AND
+  message:"ERROR /var/log/tripleo-container-image-prepare.log" AND
+  tags:"console"