title: How to remove an event from logstash?
body: <p>I have a line in my log files that literally just have a semi colon in them. I am assuming it is attached to the previous line. Logstash is constantly printing them, and I want to drop these when ever there is a line that begins with a ;.</p>
  
  <p>This is what logstash prints:</p>
  
  <pre><code>"message" =&gt; ";/r"
  "@version" =&gt; "1"
  "@timestamp" =&gt; 2014-06-24T15:39:00.655Z,"
  "type" =&gt; "BCM_Core",
  "host =&gt; XXXXXXXXXXX",
  "Path =&gt; XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX",
  "tags" =&gt; [
  [0] "_grokparsefailureZ"
  ],
  "BCM_UTC_TIME" =&gt;"2014-06-24%{time}Z"
  </code></pre>
  
  <p>I've attempted to use multiline to append to previous line so logstash would stop printing: </p>
  
  <pre><code>   multiline{
      type =&gt; "BCM_Core"
      pattern =&gt; "\;"
      negate =&gt; true
      what =&gt; "previous"
  }
  </code></pre>
  
  <p>but logstash is still printing them out. How can I make logstash drop it?</p>