refactor search filtering. Graylog2/graylog2-web-interface#443