--- patterns: ip: '(([0-9]{1,3}\.){3}[0-9]{1,3})|([0-9a-fA-F:]{2,90})' streams: tailDown: cmd: [ "sh", "-c", "echo 'found 1.1.1.1' && sleep 2s && echo 'found 1.1.1.2' && sleep 2s && echo 'found 1.1.1.1' && sleep 10m" ] filters: findIP: regex: - found retry: 2 retry-period: 1m actions: damn: cmd: [ "echo", "" ] sleepdamn: cmd: [ "echo", "sleep", "" ] after: 8m