query: >-
  (
    (message:"VolumeNotDeactivated: Volume" AND
     message:"was not deactivated in time." AND
     message:"Extend volume failed.")
    OR
    (message:"Error extending Volume" AND
     message:"Unexpected error while running command.")
  ) AND
  tags:"screen-c-vol.txt"