Merge pull request #14 from u-s-p/match-log-footer

Changed multiline pattern to match the footer

Author: bitsofinfo

logstash-modsecurity.conf

@@ -57,7 +57,7 @@ filter {
   #~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
   multiline {
-    pattern => "^--[a-fA-F0-9]{8}-A--$"
+    pattern => "^--[a-fA-F0-9]{8}-Z--$"
     negate => true
     what => previous
     type => "mod_security"