Hello,
can you try the regex as follows:
Sophos.*
This should match every service that starts with “Sophos”.
I also think you don’t need the ~ at the beginning of the Service regex, I’m pretty sure you only need that if you need a regex for specifying hosts.
You could also try the following: In the Service view click on the hamburger-menu for the service and go to “Parameters for this service”. In this view search for “Enable/disable notifications for services” and click on that link. Then you can add a new rule via “Create Service specific rule for” where the service and host are already predefined. That would be only for one service, however you can see if that rule applies or if there is a general problem with the rule processing.
Hope that helps.
Cheers,
Lorenz