When building a filter, perform the least-intensive tests
first.
Perform comparisons in the following order:
- Integers
- Dates and times
- Character strings
- Regular expressions
Note: When comparing events against a filter,
the ObjectServer stops as soon as it finds a field that does not match.