I am working on filters for my SNMP Trap Receiver Sensor.
I am stuck on the bindings part in the error filter section.
The device I am trying to incorporate has two states:
1. Error state with the trap SNMPv2-MIB::snmpTrapOID.0 = SNMPv2-SMI::enterprises.2509.8.21.3.1 SNMPv2-SMI::enterprises.2509.8.21.2.184.108.40.20676 = 2017-07-29,13:42:17 4 Foto Relay Failure 1 Slot9 Slot9 SYS SNMPv2-SMI::enterprises.2509.8.31.2.10.1.2.1 = PLX09270620
2. Normal state with the trap SNMPv2-MIB::snmpTrapOID.0 = SNMPv2-SMI::enterprises.2509.8.21.3.1 SNMPv2-SMI::enterprises.2509.8.21.2.220.127.116.1180 = 2017-07-29,13:45:46 6 Foto Relay Failure 0 Slot9 Slot9 SYS SNMPv2-SMI::enterprises.2509.8.31.2.10.1.2.1 = PLX09270620
The binding part I need is Foto Relay Failure 1.
When I use the bindings[Foto] AND bindings[Relay] AND bindings[Failure] AND  syntax I get a down state on the sensor as the  part is clearly present also in the normal state trap (for other reasons either OID or something else). If I exclude the  part I get the same result which for me is logical.
My question is how to implement the empty space between Failure and 1 in the bindings as it is clearly the only thing that distinguishes the erroneous from normal state on the device?
I tried lots of things but did not manage to do it.