Please, read flume documentation for the detailed explanation.
desired process could be accomplished by chaining few operations:
1. RegEx interseptor will add label to the event, based on the RegEx matching
2. Select or of type "multiplexing" will put events to the different channels, based on the label from interseptor.
3. Each channel will push event to specified synk.
Here is the docs:
Search for "Fan out flow" for 2 and for "Regex Extractor Interceptor" for 1.
Hope this help!