I am having difficulty with a particular alert trigger condition, and I'm hoping the community may be of assistance. The alert in question is meant to trigger when a node has rebooted. However, a few nodes in our environemtn restart their SNMP services on a nightly basis--a seperate issue we are working to resolve--and I want to exclude these nodes from the reboot alarm. I have implemented the following trigger condition, but I am still getting alerts on the two nodes grouped under the last, None condition. I am at a loss to explain why this is happening. Can anyone out there shed some light on the problem?

Many thanks in advance!