Thanks , i used the recommended format still no change,
}
mutate {
gsub => [
"message", "{", "",
"message", "}", "",
"message", "\t\t", "," ,
"message", ":", "=",
"message", "-", "=",
"message", "\t", ",",
"[payData][features]", " ", "" ]
}
json {
source => "response"
}
csv {
source => "[payData][features]"