Better control over order of [rule application] and [search & filter]

[dennisrd]

It is currently not clear what the effect is of [applying rules] and [using the search box to filter]. Are the rules applied before or after the events have been filtered? There are use cases for both options, so consider to give the user control over this.