Windows EventLog Trigger Exclusions

[ComfortablePickles]

I'm trying to setup a trigger so that it will fire when a certain number of 'hits' has been registered but skip them if there's certain words in the body of the error.

I have the trigger

{Windows Event Viewer:eventlog[Application,,,,18456,,skip].count(5m)}>5
and
({Windows Event Viewer:eventlog[Application,,,,18456,,skip].str(pickles)}=0
or
{Windows Event Viewer:eventlog[Application,,,,18456,,skip].str(cucumbers)}=0)


However, the trigger still fires even if the body has the words pickles or cucumbers in it.

Not sure what I'm missing.

[Hamardaban]

str (<pattern>,<sec|#num>)
		Supported value types: str, text, log Returns: 1 - found 0 - otherwise If more than one value is processed, '1' is returned if there is at least one matching value. This function is case-sensitive. Tip: You may use the 'count' function with the like operator to count string values that match a p

[ComfortablePickles]

Apologies, still not understanding.

I want it to trigger when there has been 5 hits, AND the words 'pickles' or 'cucumbers' NOT in the body of the eventlog.
so,
5 hits, body contains 'pickles' = not trigger
5 hits, body contains 'mustard' = trigger