{ "query": { "filter": { "text": "reportRef/@/name =\"All error audit records in 24h\"" } } }