Can I create a simple effective filter using config file flowgger.toml?

Using flowgger.toml mentioned in [configuration documentation](https://github.com/awslabs/flowgger/wiki/Configuration), how can I create a **filter** in the configure file in order to allow certain information to be re-sent out, e.g. **blacklist** a type of device, or **whitelist** a device name that only allowed data can be re-sent, all other data is blocked?

Suppose data follows rfc3164 standards.

Thank you!

Start with the linked configuration documentation and the flowgger.toml configuration path, then check how RFC3164 data is processed and whether filtering is already supported. Determine the scope needed for device blacklists or whitelists, and document a working configuration or a clear limitation if the feature is unavailable.

Written by the indexing model from the issue text.