query: >
  message:"Expected running services not running:"
  AND NOT message:"q-fwaas"
  AND tags:"console"