Alert rules still triggering after pass rules

[Andreas_Herz]

Can you post a full example of the EVE JSON output that still triggered the alert?