---
patterns:
  num:
    regex: '[0-9]+'
  ip:
    regex: '(?:(?:[0-9]{1,3}\.){3}[0-9]{1,3})|(?:[0-9a-fA-F:]{2,90})'
    ignore:
      - 1.0.0.1

streams:
  tailDown1:
    cmd: [ 'sh', '-c', 'sleep 2; seq 100010 | while read i; do echo found $(($i % 100)); done' ]
    filters:
      findIP:
        regex:
          - '^found <num>$'
        retry: 50
        retryperiod: 1m
        actions:
          damn:
            cmd: [ 'echo', '<num>' ]
          undamn:
            cmd: [ 'echo', 'undamn', '<num>' ]
            after: 1m
            onexit: false
  tailDown2:
    cmd: [ 'sh', '-c', 'sleep 2; seq 100010 | while read i; do echo prout $(($i % 100)); done' ]
    filters:
      findIP:
        regex:
          - '^prout <num>$'
        retry: 50
        retryperiod: 1m
        actions:
          damn:
            cmd: [ 'echo', '<num>' ]
          undamn:
            cmd: [ 'echo', 'undamn', '<num>' ]
            after: 1m
            onexit: false
  tailDown3:
    cmd: [ 'sh', '-c', 'sleep 2; seq 100010 | while read i; do echo nanana $(($i % 100)); done' ]
    filters:
      findIP:
        regex:
          - '^nanana <num>$'
        retry: 50
        retryperiod: 2m
        actions:
          damn:
            cmd: [ 'true' ]
          undamn:
            cmd: [ 'true' ]
            after: 1m
            onexit: false
  tailDown4:
    cmd: [ 'sh', '-c', 'sleep 2; seq 100010 | while read i; do echo nanana $(($i % 100)); done' ]
    filters:
      findIP:
        regex:
          - '^nomatch <num>$'
        retry: 50
        retryperiod: 2m
        actions:
          damn:
            cmd: [ 'echo', '<num>' ]
          undamn:
            cmd: [ 'echo', 'undamn', '<num>' ]
            after: 1m
            onexit: false