Service monitoring rules ignored

Can you please test the pattern analyzer with the whole message? I am not sure if the rule pattern is wildcarded before and after. I am a bit puzzled about your pattern because it’s not proper regular expression, the space is also a special character and normally needs to be escaped too.
Another thing you probably already have checked, still unacknowledged events can keep the state CRIT.