Can not connect to localhost:9600 for logstash

"error"=>{"type"=>"mapper_parsing_exception", "reason"=>"object mapping for [user] tried to parse field [user] as object, but found a concrete value"

yup, I gsub all UTC to empty strings, It passed that., that works!
However, it returns to the old problem, I have a user field as an object, but it seems just parses it as a JSON string, for example: "{\"firstName\"=>\"x\", \"lastName\"=>\"y\"}"