For example, to define an expression filter that will only pass on notifications that do not have an open trouble ticket ID (~*OPEN*), use the following syntax:

<filterconfig type="Expression" enable="TRUE"> 
 <criterion attribute="TroubleTicketID">~*OPEN*</criterion> 
</filterconfig>