Recognizing A Sequence of Events

I have website log that I need to act upon for a specific sequence of requests.    The sequence is something like:

IF

URL-A appears in a log record

And

Within 5 seconds URL-B appears in a log record

And

The client IP address is the same for both records

Then

Take an action.

How do I make this happen in LEM?