diff --git a/queries/1320670.yaml b/queries/1320670.yaml
new file mode 100644
index 00000000..fb89a62a
--- /dev/null
+++ b/queries/1320670.yaml
@@ -0,0 +1,4 @@
+query: >
+        tags:"console"
+        AND message:"http://127.0.0.1:35357/v3/OS-SIMPLE-CERT/ca"
+        AND message:"404 GET"