# Export CSV data from Elasticsearch using Logstash
**URL:** https://discuss.elastic.co/t/export-csv-data-from-elasticsearch-using-logstash/271702
**Category:** Logstash
**Created:** [April 29, 2021, 6:49pm UTC](https://discuss.elastic.co/t/export-csv-data-from-elasticsearch-using-logstash/271702 "2021-04-29T18:49:29Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@ice2021](https://discuss.elastic.co/u/ice2021)
#### Post date: [April 29, 2021, 6:49pm UTC](https://discuss.elastic.co/t/export-csv-data-from-elasticsearch-using-logstash/271702/1 "2021-04-29T18:49:29Z")
Hi,
I am trying to extract pivoted data from ES using Logstash. It works on Kibana but not on Logstash.
```auto
`Error: [400] {"error":{"root_cause":[{"type":"parsing_exception","reason":"Unknown key for a VALUE_STRING in [query].","line":1,"col":10}],"type":"parsing_exception","reason":"Unknown key for a VALUE_STRING in [query].","line":1,"col":10},"status":400}`
```
```auto
input {
elasticsearch {
hosts => "localhost:9200"
index => "myindex"
query => '
{"query":
"select * from (select A,B, key, value from myindex) pivot(sum(value) for key in (\"Value1\") )"
}
'
}
}
```
This works in Kibana. The only difference is the single quote.
```auto
POST /_sql?format=txt
{
"query": "select * from (select A, B, key, value from myindex) pivot(sum(value) for key in ('Value1') )"
}
```
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [April 29, 2021, 7:10pm UTC](https://discuss.elastic.co/t/export-csv-data-from-elasticsearch-using-logstash/271702/2 "2021-04-29T19:10:11Z")
The elasticsearch input uses \_search, not \_sql, so you cannot use SQL syntax in queries.
---
### Author:  [@ice2021](https://discuss.elastic.co/u/ice2021)
#### Post date: [April 29, 2021, 9:47pm UTC](https://discuss.elastic.co/t/export-csv-data-from-elasticsearch-using-logstash/271702/3 "2021-04-29T21:47:55Z")
Ah thanks. I will convert it.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 27, 2021, 9:48pm UTC](https://discuss.elastic.co/t/export-csv-data-from-elasticsearch-using-logstash/271702/4 "2021-05-27T21:48:36Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.