{"log_fixture":"2026-07-20 10:01 ERROR svc=payments msg=timeout\n2026-07-20 10:02 INFO svc=payments msg=ok\n2026-07-20 10:03 ERROR svc=auth msg=bad_token","parsing_or_query_code":"from collections import Counter\nimport re\nerrors = Counter(re.search(r'svc=(\\w+)', l).group(1) for l in lines if 'ERROR' in l)\nresult = dict(errors)","query_language":"Python + regex","expected_extracted_metrics":"{\"payments\": 1, \"auth\": 1}"}