Log viewer alerts from syslog

I only have log viewer (not analyser) running on version  2024.1.1 and I'm trying to create an alert when a syslog message is received - trying to alert on an IP SLA threshold.

Syslog message is arriving OK and I can create a rule but it's not working - hopefully missing something simple. More detial below, thanks

Here's the syslog I get 

and I created this rule

Parents Reply Children
No Data