Hello list

I'm having some problems with syslog alerts.

RP/0/RSP0/CPU0:Oct 17 11:44:17.872 : isis[1010]: %ROUTING-ISIS-5-ADJCHANGE : Adjacency to ****** (Bundle-Ether1.7) (L2) Down, Holdtime expired


RP/0/RSP0/CPU0:Oct 17 11:46:05.893 : isis[1010]: %ROUTING-ISIS-5-ADJCHANGE : Adjacency to ******* (Bundle-Ether1.7) (L2) Up, New adjacency

I'm using the regex  "/Adjacency.*Up/" and "/Adjacency.*Down/"

The "/Adjacency.*Up/" alert is working fine, but the combo Adjacency and Down doesn't alert.

If I match only on Adjacency or only on Down I do get an alert, both these two together don't work as expected.
Any workarounds or a different regex I should use?

Regards
MKS