On Wed, 10 Oct 2018 18:25:52 +0300 Yordan Karadzhov <ykaradzhov@xxxxxxxxxx> wrote: > > Actually, there are real uses to do both. You may want to show a > > specific kind of event, and then you may want to filter a subset of > > that event. > > > > But if you want to filter a subset of one event you have to use the > advanced filtering, while the logic in the "switch" is only for the "Id > filters". I guess I was thinking about filtering to show all events under a specific system, and then hiding events from within that system, but it probably is just easier to pick those events not to show in the gui (I was playing with the old KS to see how it did things). -- Steve