Strangely missing from the advanced alerts is the ability to filter based on "Does not contain" and "Does not Start with. This could prove to be very useful. For example, in the following screenshot I'm attempting to create an alert trigger on Xmit of any interface reaching 80% or greater, except interfaces that contain or start with "VLAN" but it doesn't seem possible.