Solarwinds support was able to help with the Regex. Here are the details..
ltm pool pool_name {
load-balancing-mode least-connections-member
members {
server1:http {
address x.x.x.x
session monitor-enabled
state down
}
server2:http {
address x.x.x.x
session monitor-enabled
state up
We ended up going with this Regex
state [du][op].*
This would match the "state" and the first letter being "d" or "u" and the second letter being "o" or "p"
We had to match this far to keep it from matching similar "state" lines on other parts of the config