blsanner,
Thanks for responding. I was told by support the following would work:
Can you please try reconfiguring the alert as follows:
(I'm showing indentation via stars so that you can get the indentation right)
Trigger Alert when all the following apply
***Interface Status is equal to Down
***Node Name contains GBBL
***Trigger Alert where none of the following apply
******Interface Caption contains phone
The appear to work.
I have tweaked the trigger to look like the following, but it won't work: