Just so I am clear, since I have to do a number or replacements, is this correct:

badconn:1:3:99999

would be replaced with this:

delayyellow=conn:1 delayred=conn:99999

We are want some conn alerts for some hosts to be yellow and not red.

~David