You're not using the proper syntax (you have four fields in the event header instead of 3), type /help on snotice to see the syntax and an example.