GRAYLOG - Chapter 8, Exercise 3 Solution ========================================================== Correcting Scenario 3's Level Range PROBLEM ------- Rewrite Scenario 3's own query so that it genuinely includes both critical (2) and error (3) level messages, using this chapter's own corrected form. SOLUTION -------- The original Scenario 3 query was: service:scout AND daxtraResource:"scout-cluster-eu-west-2" AND level:<3 This chapter's own warn-box explained that level:<3 only matches levels 0, 1, and 2 - genuinely excluding level 3 (Error) - and gave the fix as replacing the range comparison with explicit OR-grouping: service:scout AND daxtraResource:"scout-cluster-eu-west-2" AND level:(2 OR 3) ANSWER: service:scout AND daxtraResource:"scout-cluster-eu-west-2" AND level:(2 OR 3) ---- WHY THIS WORKS AS AN ANSWER This is a direct application of the exact fix this chapter's own warn- box specified, applied to Scenario 3's own real query. The corrected version now genuinely matches both critical and error-level scout activity on the eu-west-2 cluster, resolving the same real off-by-one gap Chapter 3 first introduced with the simpler service:scout AND level:<3 example.