Filtering operation on IDMEF messages