diff --git a/queries/1724930.yaml b/queries/1724930.yaml
new file mode 100644
index 00000000..a9b2dd23
--- /dev/null
+++ b/queries/1724930.yaml
@@ -0,0 +1,3 @@
+query: >-
+  message:"[overcloud]: CREATE_FAILED  Timed out" AND
+  filename:"logs/undercloud/var/log/extra/logstash.txt.gz"