query: >
  message:"No space left on device"
  AND filename:"logs/syslog.txt"
  AND syslog_program:"object-server"