Gsub backslash escape and continue when error

Elastic Stack Logstash
1

Hi,

I have json input, and using codec => json { charset => "UTF-8" }

I see that logstash giving Json::ParserError: Unrecognized character escape '' when I am getting message below;

"incoming": "\u001Btb��01w"

I used
json {
skip_on_invalid_json => true
source => "message"
remove_field => [ "message" ]
}
and
mutate {
gsub => [ "incoming", "[\]", "" ]
}

But after that I see that when "incoming" has \ successfully parsed. But, if I get message below, I am getting Json::ParserError: Unrecognized character escape 'a'

"incoming": "\\u\u\asd\sasdm�01w"

Whats the proper way to escape all incoming backslash characters.
And is there any way to keep working logstash when json parse error ? Because when I get json parse error, logstash stops sending data.

2

any comment would be perfect

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.