Multiline Codec logstash for log level

That suggests that you have entered ^[ as a caret and a square bracket instead of a literal escape character (ctrl/v+esc on UNIX).