Let's assume I have two fields: Event source and event type.
Types of events are unique to sources. Meaning, a specific event type always comes from the same event source.
I am creating a "must" filter, to get specific events.
I can create two filters inside it - one for the event type, and the other for the event source.
- Use the two filters (Under the assumption adding a logical condition will help speed up the filtering)
- Only use the more specific filter of the event type (Under the assumption less filters mean less work because one filter's resultset is a subset of the other filter's resultset)
- Forget about this, because the impact is negligible