Hello, I am trying to parse some csv logs using logstash and I am getting this error: [WARN ] 2021-01-27 14:05:31.217 [[main]>worker2] csv - Error parsing csv {:field=>"message", :source=>"\"2020-12-24 00:01:23\", \"293f23a665294a306dc11dcf4924f11eaf888f03e1c7832b6e21158c426fa845\", \"aeb998262d89…

If a field is quoted then the entire field has to be enclosed in double quotes. You cannot have any characters (e.g. a space) before the opening quote. You can use mutate+gsub to replace '", "' with '","'.

[ Error parsing CSV ] : :exception=>#<CSV::MalformedCSVError: Illegal quoting in line 1.>

Elastic Stack Logstash

system (system) Closed February 24, 2021, 4:55pm 4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Error while parsing csv file using logstash Logstash	2	688	August 22, 2018
Illegal quoting in line (When i use " in csv file) Logstash	4	5926	August 3, 2017
Error parsing csv Logstash	4	3772	July 3, 2017
exception=>#<CSV::MalformedCSVError: Unclosed quoted field on line 1 Logstash	2	4730	July 22, 2017
MalformedCSVError: Illegal quoting in line 1 Logstash	6	2711	March 12, 2021

[ Error parsing CSV ] : :exception=>#<CSV::MalformedCSVError: Illegal quoting in line 1.>

Related topics