# Arabic and special characters

**URL:** <https://discuss.elastic.co/t/arabic-and-special-characters/363613>\
**Category:** Logstash\
**Created:** [July 23, 2024, 7:45am UTC](https://discuss.elastic.co/t/arabic-and-special-characters/363613 "2024-07-23T07:45:22Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![abdullah144](https://avatars.discourse-cdn.com/v4/letter/a/91b2a8/32.png) [@abdullah144](https://discuss.elastic.co/u/abdullah144)\
**Post date:** [July 23, 2024, 7:45am UTC](https://discuss.elastic.co/t/arabic-and-special-characters/363613/1 "2024-07-23T07:45:22Z")

</div>

Dear Team,

kindly note that when we stashing to Logstash with data contains Arabic or Special characters , it showing to HTML encoded text ,  
Example :

Ma’aden (original text) ----\>`Ma&#8217;aden (elastic log)`

الرياض (original text) -----\>  
`&#1575;&#1604;&#1585;&#1610;&#1575;&#1590; (elastic log)`

kindly your support to have it as original text.

Also , please find below my configuration:-

```auto
input {
 http {
	host => "x.x.x.x"
	port => 3131
    }
}
filter{
	mutate {
	remove_field => ["body","Log"]
    }
xml {
        source => "message"
	target => "doc"
	remove_namespaces => true
	force_array => false
	remove_field => ["[doc][logMessage]" , "[doc][gtxnID][keyword]" , "[headers][connection]" , "[headers][content_length]" , "[headers][content_type]" , "[headers][http_host]" , "[headers][http_version]" , "[headers][request_method]" , "[headers][request_path]"]
      }
}
output {
  elasticsearch { hosts => ["x.x.x.x:9200"] 
                   user => "elastic"
                   password => "xxxx"
                   index => "datapower"
    }
  stdout 
	{ 
        codec => plain
    }
}

```

Best regards,

---

<div class="post-metadata">

**Author:** ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\
**Post date:** [July 23, 2024, 10:20am UTC](https://discuss.elastic.co/t/arabic-and-special-characters/363613/2 "2024-07-23T10:20:31Z")

</div>

From #Kibana to #Logstash

---

<div class="post-metadata">

**Author:** ![abdullah144](https://avatars.discourse-cdn.com/v4/letter/a/91b2a8/32.png) [@abdullah144](https://discuss.elastic.co/u/abdullah144)\
**Post date:** [August 1, 2024, 11:55am UTC](https://discuss.elastic.co/t/arabic-and-special-characters/363613/3 "2024-08-01T11:55:18Z")

</div>

Dear @carly.richmond ,

for your support please

---

<div class="post-metadata">

**Author:** ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\
**Post date:** [August 1, 2024, 12:49pm UTC](https://discuss.elastic.co/t/arabic-and-special-characters/363613/4 "2024-08-01T12:49:09Z")

</div>

Hi @abdullah144,

On the Elasticsearch side, can you check with analyzer is being used by your index? Is it the [Arabic analyzer](https://www.elastic.co/guide/en/elasticsearch/reference/current/analysis-lang-analyzer.html#arabic-analyzer)?

---

<div class="post-metadata">

**Author:** ![abdullah144](https://avatars.discourse-cdn.com/v4/letter/a/91b2a8/32.png) [@abdullah144](https://discuss.elastic.co/u/abdullah144)\
**Post date:** [August 1, 2024, 1:46pm UTC](https://discuss.elastic.co/t/arabic-and-special-characters/363613/5 "2024-08-01T13:46:21Z")

</div>

Dear @carly.richmond ,

you mean the below ?

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/5/7/5703d4faf8cb6b4abaad2dc218fe5034e7f31a8b.png)

---

<div class="post-metadata">

**Author:** ![abdullah144](https://avatars.discourse-cdn.com/v4/letter/a/91b2a8/32.png) [@abdullah144](https://discuss.elastic.co/u/abdullah144)\
**Post date:** [August 7, 2024, 10:28am UTC](https://discuss.elastic.co/t/arabic-and-special-characters/363613/6 "2024-08-07T10:28:34Z")

</div>

Dear @Badger ,

your usual support please

Thanks,