You can use the following syslog-ng filters in your SyslogNGFlow and SyslogNGClusterFlow resources.