# How to eliminate square brackets in the parsed logs
**URL:** https://discuss.elastic.co/t/how-to-eliminate-square-brackets-in-the-parsed-logs/248502
**Category:** Logstash
**Created:** [September 14, 2020, 9:38am UTC](https://discuss.elastic.co/t/how-to-eliminate-square-brackets-in-the-parsed-logs/248502 "2020-09-14T09:38:20Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@prajwalgmpp](https://discuss.elastic.co/u/prajwalgmpp)
#### Post date: [September 14, 2020, 9:38am UTC](https://discuss.elastic.co/t/how-to-eliminate-square-brackets-in-the-parsed-logs/248502/1 "2020-09-14T09:38:21Z")
The pattern is : ` match => { "message" => "%{SYSLOG5424SD:time}%{SYSLOG5424SD:level}%{SYSLOG5424SD:message} %{SYSLOG5424SD:node} realm %{SYSLOG5424SD} authenticated user %{SYSLOG5424SD:user}, with roles %{SYSLOG5424SD:role}" }`
And the parsed output is `[2020-09-14T09:28:05,343][DEBUG][o.e.x.s.a.e.NativeRealm] [cle-data-0] realm [native1] authenticated user [logstash_admin_user], with roles [[logstash_admin, logstash_system, superuser]], [o.e.x.s.a.e.NativeRealm]`
How can I eliminate the square brackets in the output?
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [September 14, 2020, 1:51pm UTC](https://discuss.elastic.co/t/how-to-eliminate-square-brackets-in-the-parsed-logs/248502/2 "2020-09-14T13:51:09Z")
Use mutate+gsub. Something like
```
mutate { gsub => ["message", "[\[\]]", "" ] }
```
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 12, 2020, 1:51pm UTC](https://discuss.elastic.co/t/how-to-eliminate-square-brackets-in-the-parsed-logs/248502/3 "2020-10-12T13:51:12Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.