This filter will filter out
any entries from Kermit with process name CROND if
the facility is Clock with severity Information
and the message contains the word hourly.
In this example, all the available
fields have been used when specifying the filter. This not only
minimizes the risk for an unintentional filter (Filter out any
message with the word hourly would filter out the desired entries,
and most likely others too). Specifying as many options as possible
also drastically reduces the load on the database. Most of these
fields are indexed by the database, hence reducing the load is they
are specified in the filter.