Filtering traces for e.g sql.client.duration would most of the time not work with the current match or not_match operators, as times or number of bytes rarely match an exact number, but it is more common to filter for "outliers" in the sense of very small or very large values.