[10:18:54] <godog>	 I was looking into the indexing failures for logstash, though the logstash link doesn't show results, nor the grafana dashboard shows any obvious sign, I take it is the dlq ?
[14:29:21] <cwhite>	 godog: Yep, DLQ should have that info now.  Quick look makes me think https://phabricator.wikimedia.org/T269676#7323290 happened again.
[14:32:43] <godog>	 cwhite: indeed that makes sense to me, could you integrate the runbook with what you did and what/how to look for in the DLQ?
[14:33:35] <godog>	 not immediately that is
[14:35:52] <cwhite>	 Sure, I can do that.  I've been using the Logstash Dead Letters saved search, so you are aware
[14:39:03] <godog>	 cheers! I'll followup on the logstash AM alerts review while we're at it
[14:44:04] <cwhite>	 Thanks!  Good thinking, a note about the DLQ in the alert seems appropriate.