I would like to have an event trip on the log entry ".*Crypto.tunnel.is.*" where the value I'm looking for immediately following is UP or DOWN. I see that I can set an environment variable for _syslog_pattern, but I'm unsure with EEM how do utilize ...