1. A method for processing filter rules comprising: receiving a plurality of filter rules having one or more attributes, each attribute having a value indicating a condition to qualify whether a filter rule applies to an event; generating a plurality of summary rules, each summary rule having a plurality of summary conditions; associating a first portion of the plurality of filter rules to a first one of the plurality of summary rules; and extending the plurality of summary conditions of the first one of the plurality of summary rules to span the attributes of the first portion of the plurality of filter rules.