Comment 8 for bug 1257644

I can't do a logstash query on whether or not the host was automatically disabled because in the ComputeFilter it logs a disabled host at debug level and we don't index debug level messages. And with change Ia7544a35 it only adds the "AUTO:" disabled_reason flag in the libvirt driver, so checking for that in the ComputerFilter would be a hack, long-term we really need a column in the Service model to indicate if the enable/disable action was automatic or not as suggested in bug 1250049.