I have a healthcare customer using Cisco Secure Workload. They would like to filter their syslog messages from Cisco Secure Workload before forwarding to their cloud SIEM solution to save on storage since they pay as they go. What capabilities does Cisco Telemetry Broker have to parse syslog messages and only forward messages that meet certain criteria?