I've tried...
port_descr_notes notmatch *NoAlert*
port_descr_notes notregexp .*NoAlert.*
Both with no success (they both completely invalidate the rule).
The string "NoAlert" should be able to fall anywhere in the description, start, middle, end - or just completely by itself.
Thank you in advance for any suggestions.
Cheers, Troy