when configuring a trigger with the item proc.num to watch a process owned by a longer username (one that the ps -ef command will not show), proc.num can't see the running process and fires a false alarm