anchor.diff:  {
     "query": {
       "match": {
  -      "user.id": "zVZMamUM"
  -    }
  -  }
  -}
  -----
  -// TEST[continued]
  +      "user.id": "vlb44hny"
  +    }
  +  }
  +}
  +----
   ====
   
   [discrete]
  
positive.code: }
  
  PUT /_data_stream/logs
  ----
  ////
  
  [discrete]
  
negative.code: [%collapsible]
  ====
  The following delete by query API request deletes documents in the `logs` data
  stream with a `user.id` of `vlb44hny`.
  
  [source,console]
  ----
  