Monitoring item types: database monitoring

The latest data sample (nearly 3) :
The 2019-08-17 17:27:31 [{{# ERRMSG} ":" abcdefghxxxxx anomalies "}]
The 2019-08-17 17:26:31 []
The 2019-08-17 17:25:21 []

Trigger:
{XXXXXXX: db. Odbc. Discovery [sqlser1, DSN]. Strlen ()} & gt; 2 and
{XXXXXXX: db. Odbc. Discovery [sqlser1, DSN]. Diff ()}=0 and
{XXXXXXX: db. Odbc. Discovery [sqlser1, DSN]. STR (" ABC ")}=0

Application:
When the content of the return on the length of more than 2 and a different and does not include the ABC when triggered,

Question:
The content of the latest data to include abcdefgh, why still triggers, where is write wrong?
Or data contains special characters (such as Chinese, quotes to trigger judgment)?