Timestamps in "LEM Internal Events" are fine. There is small difference, less than 5 minutes in InsertionTime and DetectionTime.
LEM can successfully fire alert on those evens.
Problem is with SNMP Traps.
I'm filtering by:
SystemStatus.ToolAlias = SNMPTrapAlias
This is the Filter for all SNMP Traps messages (assigned to SNMP connector):