I have always put a filtering server in place before the messages got to the LEM or to Orion. One solution would be to have the messages forwarded first to a Kiwi Syslog Server and then have filtering rules in the Kiwi server drop the
unneeded messages prior to sending them on to the LEM or Orion. Kiwi is very affordable and supports a decent message rate.