query: >
  message:"HTTP/1.0 503"
  AND tags:"syslog.txt"
  AND syslog_program:"proxy-server"