ASL Driver issues

I’ve written a ASL driver to flag events in user defined 5 when they have been down for 30 minutes and flag user defined 6 when they are cleared for 15 minutes.
The problem I have is that most events are flagged correctly, but some are only flagged in 1 and a half or double the time. I think the problem is that I don’t receive the event in the driver with the first notify and with the Clear.
This is the driver import file.
GA_DaemonDriver::TAGGING-Driver
{ ReadsRulesFrom = GA_RuleSet::TAGGING-NOTI-RS
{ fileName = "ics/RIM_Tagging.asl"
}
ReadsInputFrom = GA_SubscriberFE::TAGGING-NOTI-FE
{
SubscribesTo += GA_PropertyChoiceSubscription::TAGGING-NOTI-Sub
{
classPattern = "ICS_Notification"
instancePattern = "*Down"
propertyPattern = "*"
glob=TRUE quiet=FALSE sticky=TRUE expandSubClasses=FALSE expandSubClassesProperties=FALSE
}
compressNotifications = FALSE
suppressSubscriptionMessages = FALSE
trace = TRUE
}
waitForCompletion = FALSE
}

call GA_DaemonDriver::TAGGING-Driver start

When I enable trace I see a lot more events than I see in the asl file.

Can some please help me find a way to ensure that all the events are passed to the asl file.