For example, to define an expression filter that will only pass on notifications that do not have an open trouble ticket ID (~*OPEN*), use the following syntax:
<filterconfig type="Expression" enable="TRUE"> <criterion attribute="TroubleTicketID">~*OPEN*</criterion> </filterconfig>