Event Log rules

I find the configuration of event log rules rather confusing. Our previous monitoring software was designed so that user notification profiles specified the level of event that the user wanted to see (warning, critical, error, etc.), but other than that, all events for that level and above were alerted by default. You could then add filters to block events (based on error type or text strings) by device, device type, or globally. This seemed very logical, since you could not know in advance the types of errors you would get, so start out getting all of them. As you see certain errors, you can decide to filter them out, but everything else comes through.

With OpMan, you need to configure the device and the notification profile to include the items you want, and it seems that you have to either take everything, or create a series of different rules in order to get everything but the few items you don't want.

Am I missing something? If so, do you have a white paper, or something with examples to help us? We'd like to be able to duplicate the simplicity of our previous software if possible.

Thanks,
Andrew Williams