The following rules are important when setting up filters in multiple packages.
1.Only filters from global or assigned packages will be processed.
2.A notification is never processed more than once. If two filters configured for the same notification match an event, that event will still only be forwarded to that notification once.
3.Exclude filters from all packages are always checked before an event is forwarded to a notification. Exception: An event log package is configured to ignore foreign excludes - in this case only exclude filters from the same package as the include filter are checked.
4.Filters from Catch-All packages are always processed after filters from Non-Catch-All packages.
5.If an include filter with a threshold setting matches an event, then any subsequently matching filter will not process the event.
6.Packages are processed in the order show in the management application with the exception of Catch-All packages which are always processed after regular packages.
Please see the flowchart below to see how filters are processed: