GRAYLOG - Chapter 5, Exercise 3 Solution
==========================================================
Finding Large Responses from Scout

PROBLEM
-------
A colleague wants to search for slow, large responses from the scout
service - responses over 100,000 bytes. Using this chapter's own real
field and Chapter 3's own range-comparison syntax, write a query for
responses larger than 100000 bytes on scout.

SOLUTION
--------
This chapter's own field table lists responseSize as the field holding
response size in bytes. Chapter 3 established Lucene's real range-
comparison syntax using > and < directly on a field.

Combining service, the responseSize field, and the > range operator:

    service:scout AND responseSize:>100000

ANSWER: service:scout AND responseSize:>100000

----
WHY THIS WORKS AS AN ANSWER

This combines this chapter's own responseSize field with Chapter 3's
own real range-comparison syntax (demonstrated there using < on the
level field, and here applied with > on a different numeric field) and
Chapter 2's own service field. Since responseSize is a genuinely
numeric field, the same > and < range operators Chapter 3 covered for
level apply to it identically.