--- patterns: num: regex: '[0-9]+' ip: regex: '(?:(?:[0-9]{1,3}\.){3}[0-9]{1,3})|(?:[0-9a-fA-F:]{2,90})' ignore: - 1.0.0.1 concurrency: 0 streams: tailDown1: cmd: [ 'sh', '-c', 'sleep 2; seq 100010 | while read i; do echo found $(($i % 100)); done' ] filters: findIP: regex: - '^found $' retry: 50 retryperiod: 1m actions: damn: cmd: [ 'sleep', '0.' ] undamn: cmd: [ 'sleep', '0.' ] after: 1m onexit: false tailDown2: cmd: [ 'sh', '-c', 'sleep 2; seq 100010 | while read i; do echo prout $(($i % 100)); done' ] filters: findIP: regex: - '^prout $' retry: 50 retryperiod: 1m actions: damn: cmd: [ 'sleep', '0.' ] undamn: cmd: [ 'sleep', '0.' ] after: 1m onexit: false tailDown3: cmd: [ 'sh', '-c', 'sleep 2; seq 100010 | while read i; do echo nanana $(($i % 100)); done' ] filters: findIP: regex: - '^nanana $' retry: 50 retryperiod: 2m actions: damn: cmd: [ 'sleep', '0.' ] undamn: cmd: [ 'sleep', '0.' ] after: 1m onexit: false tailDown4: cmd: [ 'sh', '-c', 'sleep 2; seq 100010 | while read i; do echo nanana $(($i % 100)); done' ] filters: findIP: regex: - '^nomatch $' retry: 50 retryperiod: 2m actions: damn: cmd: [ 'sleep', '0.' ] undamn: cmd: [ 'sleep', '0.' ] after: 1m onexit: false