GRAYLOG - Chapter 2, Exercise 3 Solution ========================================================== Scoping to Scout on the eu-west-2 Cluster PROBLEM ------- Write a query that scopes to the scout service running specifically on the eu-west-2 cluster, using this chapter's own real daxtraResource example value. SOLUTION -------- This chapter's own real daxtraResource examples included "scout-cluster-eu-west-2" specifically. Combining that with the service field (per Chapter 1's own AND syntax): service:scout AND daxtraResource:"scout-cluster-eu-west-2" The value is quoted here because it contains hyphens, which is a sensible, safe habit for any daxtraResource value made of multiple hyphenated segments - it ensures the whole value is treated as one exact match rather than being split apart. ANSWER: service:scout AND daxtraResource:"scout-cluster-eu-west-2" ---- WHY THIS WORKS AS AN ANSWER This directly combines this chapter's own confirmed real daxtraResource value with Chapter 1's own AND syntax, exactly mirroring the "combine service and account for tight scoping" pattern this chapter's own tip-box already demonstrated - here scoping by service and daxtraResource together instead, to isolate one specific service on one specific cluster.