Enable/disable notifications for services rule not working as expected

[CheckMan]

Thanks for your answer. Got it working that way!

Solution:
The term “Service” needs to be placed in front of the string… So the service pattern musst be Service Sophos*