{event-type: error} occurred. So you can write the pattern "...{event-type: error}" where . means any hash-map, just like it means any character in ordinary text regexes. If you then run matches(the-pattern, the-sequence) it would return all instances of the pattern, so you can inspect what happened before the errors. You can also use the *, +, [ ], [^ ], ? and | metacharacters. So you could look for streaks of errors with "{event-type: error}+". You can also use parentheses both for grouping and for extracting submatches from the matches.