query: >
  message:"ERROR with Account server 127\.0\.0\.1\:6012\/sdb1" AND
  message:"Connection refused" AND
  tags:"syslog.txt"