Part IV. Filtering operation on IDMEF messages