Alert SQL not working

[Lockie85]

Which OpenObserve functionalities are the source of the bug?

alerts

Is this a regression?

Yes

Description

Hi,

I have an alert with the following SQL which triggers without issue:

SELECT *
FROM StreamA
WHERE (
    LOWER(message) LIKE '%blue%'
    OR LOWER(message) LIKE '%green%'
    OR LOWER(message) LIKE '%red%'
);

However, then I add a string to exclude from that alert like this:

SELECT *
FROM StreamA
WHERE (
    LOWER(message) LIKE '%blue%'
    OR LOWER(message) LIKE '%green%'
    OR LOWER(message) LIKE '%red%'
)
AND LOWER(message) NOT LIKE '%192.168.1.10%';

The alert does not work anymore. Any ideas why this might be?

Many Thanks

Please provide a link to a minimal reproduction of the bug

No response

Please provide the exception or error you saw

No response

Please provide the version you discovered this bug in (check about page for version information)

v0.10.9-rc3

Anything else?

No response