Systems and methods for filtering a large group of devices are presented. In an example embodiment, a value is accessed for each of a plurality of attributes for each of a plurality of devices. Also accessed is a filter set including one or more filters. Each of the filters comprises one of the attributes, a filter value, and a relational operator relating the attribute to the filter value. The attribute of at least one of the filters indicates an event applicable to individual devices, and a corresponding filter value indicates whether to filter the devices based on the presence or absence of a previous occurrence of the event. The filter set is compared to the attributes of each of the devices to identify those of the devices that satisfy all of the filters of the filter set. A representation of at least some of the identified devices is displayed.