Regex help for RouteOnContent processor

Hello Experts,

I am looking for a regex to configure in "RouteOnContent" processor of Nifi so that based on specific string in flow file content I can route FF.

FF content :

● rclone.service - Rclone(file transfer tool) Remote Service
   Loaded: loaded (/etc/systemd/system/rclone.service; enabled; vendor preset: enabled)
   Active: active (running) since Thu 2022-02-03 09:46:01 UTC; 6h ago
 Main PID: 23647 (rclone)
    Tasks: 13
   Memory: 61.3M
      CPU: 5.143s
   CGroup: /system.slice/rclone.service
           └─23647 /usr/bin/rclone rcd --rc-no-auth --rc-job-expire-duration=60m --cache-tmp-upload-path=/tmp/rclone/upload

I want to search for the string "Active: active (running)" in flow file content, if present route to different path.

I tried few regex but did not work as expected.

Any suggestion would be much appreciated.

Thanks

Mahendra