I’m want to create a google_monitoring_alert_policy that checks if a field is missing in the LogEntry by using the :* syntax described by the docs.

But terraform returns Error creating AlertPolicy: googleapi: Error 400: Request contains an invalid argument..

The resource looks like this:

resource "google_monitoring_alert_policy" "my-alert-policy" {
  ...
  conditions {
    ...
    condition_matched_log {
      filter = <<-EOT
        myField:*
      EOT
     ...
    }
  }
 ...
}

Using hashicorp/google version 4.84.0

I’ve tried to create alert policies without myField:* and that works, I’ve tried the query in Logs Explorer. Also works.