diff --git a/queries/1446583.yaml b/queries/1446583.yaml new file mode 100644 index 00000000..2c96e3d2 --- /dev/null +++ b/queries/1446583.yaml @@ -0,0 +1,3 @@ +query: > + message:"The following services are still running" AND message:"die" + AND tags:"grenade.sh.txt"