Skip to main content

Best Practices

  • Evaluate only the filter groups that are required. Although this action is designed for performance, large numbers of filters can affect execution time and resource consumption.

  • Prioritize filter groups based on expected match frequency.

  • Order filters within a group based on expected match frequency.

    • Filter conditions do not have a priority attribute. To change their order, delete and re-create them. For information about using the API to reorder filters, see below.

  • If a filter group applies only to a specific subset of alerts, use standard Workflow Engine features to target the appropriate groups, such as entry filters or named groups specified in the matchFilter action.