Kiwi Syslog Complex Text Parsing

I am trying to quiet down my kiwi syslog server a bit. I have reporting working well for several functions.

I have it alerting on any service "entered the stopped state" but this is making my server noisy.

I want to exclude "The Application Experience service" from sending an alert, but can't seem to get the text to parse properly to do this.

I have made my rule like so, but it's not working properly.

Am I doing this right, or should I be doing this another way?

Does anyone else notify on services stopping?

Thanks.og_setup