pick the first log line with expected severity
increase HWM for device sockets