[query_elasticsearch_octobus_audit_deadletter]
QueryIntervalSecs = 300
QueryTimeoutSecs = 15
QueryIndices = c0666_log_deadletter*
QueryJson = {
  "size": 0,
  "query": {
    "bool": {
      "must": [],
      "filter": [
        {
          "bool": {
            "should": [
              {
                "match_phrase": {
                  "sap.ocb.deadletter.original_index": "c0001_log_audit"
                }
              },
              {
                "match_phrase": {
                  "sap.ocb.deadletter.original_index": "c0001_log_audit_tools"
                }
              },
              {
                "match_phrase": {
                  "sap.ocb.deadletter.original_index": "c0001_log_audit_auditbeat"
                }
              },
              {
                "match_phrase": {
                  "sap.ocb.deadletter.original_index": "c0001_log_audit_awx"
                }
              }
            ],
            "minimum_should_match": 1
          }
        },
        {
          "range": {
            "@timestamp": {
              "gt": "now-15m",
              "format": "epoch_millis"
            }
          }
        }
      ]
    }
  }

[query_elasticsearch_octobus_audit_deadletter]
QueryIntervalSecs = 300
QueryTimeoutSecs = 15
QueryIndices = c0666_log_deadletter*
QueryJson = {
    "size": 0,
    "query": {
      "bool": {
        "must": [],
        "filter": [
          {
            "range": {
              "@timestamp": {
                "gt": "now-15m",
                "format": "epoch_millis"
              }
            }
          }
        ],
        "should": [
          {
            "match_phrase": {
              "sap.ocb.deadletter.original_index": "c0001_log_audit"
            }
          },
          {
            "match_phrase": {
              "sap.ocb.deadletter.original_index": "c0001_log_audit_tools"
            }
          },
          {
            "match_phrase": {
              "sap.ocb.deadletter.original_index": "c0001_log_audit_auditbeat"
            }
          },
          {
            "match_phrase": {
              "sap.ocb.deadletter.original_index": "c0001_log_audit_awx"
            }
          }
        ],
        "minimum_should_match": 1
      }
    }
  }

Revert "[OctobusQE] Rewrite deadletter query"
Revert "[OctobusQE] Rewrite deadletter query"

This reverts commit c65c5361a0b7ec52660fa19abf1ad7b982385f64.
