gcp filter

resource.type="k8s_cluster"
resource.labels.location="us-east1-b"
resource.labels.cluster_name="operations"
jsonPayload.message:"(combined from similar events)"

resource.type="k8s_cluster"
resource.labels.location="us-east1-b"
resource.labels.cluster_name="production"
protoPayload.methodName:(update OR patch OR create OR delete)
protoPayload.authenticationInfo.principalEmail:".network"
protoPayload.resourceName="core/v1/namespaces/default/configmaps/webapp"

resource.type="global"
logName="projects/localcoin-146010/logs/paritystatus"
jsonPayload.parity=("parityfast1.bncr.io" OR "parityfast6.bncr.io")

"Transaction nonce is too low"
resource.labels.cluster_name="production"
resource.labels.container_name="blockchains"

resource.type="container"
resource.labels.cluster_name="test"
resource.labels.namespace_id="kube-system"
resource.labels.container_name="kube-lego"

labels."container.googleapis.com/pod_name"="widget-convert-3287106449-2v7lz"

jsonPayload.message:"currencies.commandHandler: error executing command for currencies.getByCode, error: MongoError: could not find host matching read preference"

resource.type="container"
resource.labels.cluster_name="production"
logName!="projects/localcoin-146010/logs/parity"
severity>=ERROR
textPayload:"Points must be written in order"
timestamp >= "2017-11-15T10:20:00Z"
timestamp <= "2017-11-15T10:21:00Z"

severity=ERROR
resource.type="container"
resource.labels.cluster_name="test"
labels."container.googleapis.com/namespace_name"=test4
logName="projects/localcoin-146010/logs/access-control"