codec_demo.conf

input {
  stdin {
     codec => multiline {
      pattern => "^\["
      negate => true
      what => "previous"
     }
  }
}

output {
  stdout {
    codec => rubydebug
  }
}