diff --git a/queries/1456835.yaml b/queries/1456835.yaml
new file mode 100644
index 00000000..9c903468
--- /dev/null
+++ b/queries/1456835.yaml
@@ -0,0 +1,4 @@
+query: >-
+  message:"/opt/stack/old/devstack/lib/keystone" AND
+  message:"disable_apache_site: command not found" AND
+  tags:"console"