When using a content filter policy that contains multiple conditions, triggering this policy with any condition will result in all matching text being displayed in the Verdicts of the Message Audit Logs . This means that even if one of the matching texts does not individually trigger the policy, it will still be shown in the logs alongside the other matching text that did trigger the policy.
A message containing the words "and2" and "or2" will trigger this policy for meeting the condition If text in Body part of the message contains 1 or more occurrences of "or2".
However, the verdicts shows are for all the matching texts "and2" and "or2".
Release : 10.7.X, 10.8.X
This is working by design. The Message Audit Logs is showing the fired verdict with all matching texts and not all matching conditions.