query: >
message:"ERROR with Account server 127\.0\.0\.1\:6012\/sdb1" AND
message:"Connection refused" AND
tags:"syslog.txt"