1000_input_stdin_example.conf

input {

  stdin {
    type => "mod_security"

    codec => multiline {
      pattern => "^--[a-fA-F0-9]{8}-Z--$"
      negate => true
      what => next
    }
  }

}