False alert does not correspond to actual log lines

We get false alarms.
We have an alert set to be triggered when less than 1 lines are present within 30 minutes but we’ve experienced alerts while, when checking the logdna app, there are at least 1 lines in the given time slot.
The alert:

The log:

Any tips to debug this?