The underlying filter should essentially be the same, though in the case of the journal, the filter is also used in building the query, so there could be something there.
It would probably be useful for you guys to do a few things for me:
Describe the filters you’re trying to use, in both the status and journal scenarios, and exactly where you’re using them. It’s possible they get applied slightly differently in different situations, like when you use the source filter property on the component, vs. the actual filter popup on the the component during runtime.
Try turning a few loggers on an see what information you get:
“Alarming.Journal.Query” to trace will show the query, the filter, and various details about event counts/data.
“Alarming.Query.Filter” to trace will show which particular conditions are causing events to fail.
Let me know what you find, or post wrapper logs for me to take a look at after you run a few queries.