Currently the functionality between Local and Server filters in Control Centre are inconsistent. The filters them selves need to have better logic as a field can only be used once in an expression. So you cannot say
"AND event severity is not 21 AND event severity is not 22"

Comments

  • The filters also need to be easier to access, by that I mean you should be able to copy some filter data from a spreadsheet, like a list of computers, and paste it into the filters. It's too much mouse-click work to make an "advanced" filter e.g. "Computer = PC1" OR "Computer = PC2" ect. Try doing that for 10, 20 or 100 computers.

  • The filters could follow the approach of Outlook Rules (I know NetIQ don't use Outlook, but I am sure you are all familiar with it). This would allow for the construction of complex rules that are simple to follow, copy and edit.