Abstract: A according to the present invention is provided a system and method for filtering incoming data events which are defined by data attributes according to generic rules defined by users, said rules containing combination of criterion for the data attributes. Each of the rules is converted to set of expressions, wherein each expression comprises a set of Boolean conditions. Said conditions are defined as true if the data attributes are falling within said criterion. Each incoming data event is tested according to said query by checking said Boolean conditions. Data events which satisfy all Boolean condition of at least one expression are reported to the users.