tail -F /var/log/app.log \
  | grep --line-buffered -E 'ERROR|WARN' \
  | sed -u 's/ERROR/\x1b[31m&\x1b[0m/'