excluded_keys: format match to alert's format