--- patterns: num: regex: '[0-9]+' ip: regex: '(?:(?:[0-9]{1,3}\.){3}[0-9]{1,3})|(?:[0-9a-fA-F:]{2,90})' ignore: - 1.0.0.1 streams: tailDown1: cmd: [ "sh", "-c", "sleep 2; seq 100010 | while read i; do echo found $(($i % 100)); done" ] filters: findIP: regex: - '^found $' retry: 50 retry-period: 1m actions: damn: cmd: [ "echo", "" ] undamn: cmd: [ "echo", "undamn", "" ] after: 1m onexit: false tailDown2: cmd: [ "sh", "-c", "sleep 2; seq 100010 | while read i; do echo prout $(($i % 100)); done" ] filters: findIP: regex: - '^prout $' retry: 50 retry-period: 1m actions: damn: cmd: [ "echo", "" ] undamn: cmd: [ "echo", "undamn", "" ] after: 1m onexit: false tailDown3: cmd: [ "sh", "-c", "sleep 2; seq 100010 | while read i; do echo nanana $(($i % 100)); done" ] filters: findIP: regex: - '^nanana $' retry: 50 retry-period: 2m actions: damn: cmd: [ "true" ] undamn: cmd: [ "true" ] after: 1m onexit: false tailDown4: cmd: [ "sh", "-c", "sleep 2; seq 100010 | while read i; do echo nanana $(($i % 100)); done" ] filters: findIP: regex: - '^nomatch $' retry: 50 retry-period: 2m actions: damn: cmd: [ "echo", "" ] undamn: cmd: [ "echo", "undamn", "" ] after: 1m onexit: false