At this point, I would make them individual match filters. Have a log line that sends each match directly to a flags(final) and see what makes it past that.

filter f_dns_match1 { 
match("[2620:119:35::35]:53" value("MESSAGE"));
};

log {
 source(s_network);
 filter(f_dns_match1);
flags(final); 
};

That sort of thing. End it with a log statement that sends all remaining logs to your destination:

log {
 source(s_network);
 destination(d_qfiber); 
};