Pay attention to the letter case of attribute names in your query. Soon log queries will be case-sensitive, meaning that to find your logs you need to write the attribute names in your query with the same letter case as they were when they were ingested.
