The logstash configuration compiler will always interpret a backslash before the end of a double quoted string as escaping the double quote.
The standard trick is to use a single occurrence of a character group with a single member, which is equivalent to the single character in the group: "[\\]"