# How to escape character in logstash

**URL:** <https://discuss.elastic.co/t/how-to-escape-character-in-logstash/171327>\
**Category:** Logstash\
**Created:** [March 7, 2019, 2:30pm UTC](https://discuss.elastic.co/t/how-to-escape-character-in-logstash/171327 "2019-03-07T14:30:39Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![mandar.raj](https://avatars.discourse-cdn.com/v4/letter/m/82dd89/32.png) [@mandar.raj](https://discuss.elastic.co/u/mandar.raj)\
**Post date:** [March 7, 2019, 2:30pm UTC](https://discuss.elastic.co/t/how-to-escape-character-in-logstash/171327/1 "2019-03-07T14:30:39Z")

</div>

I want to execute below sql statement in input of logstash configuration file but it fails to compile

statement =\> "select ALERT\_ID, regexp\_replace(regexp\_substr(html\_file\_key,'(._?)'),'|','') as alertDate, regexp\_replace(regexp\_substr(html\_file\_key ,'(._?)'),'|','') as score from alerts"

I am getting below error log

[2019-03-07T19:31:17,534][ERROR][logstash.agent] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of #, {, } at line 11, column 91 (byte 436) after # JDBC -\> Logstash -\> Elasticsearch pipeline.\n\ninput {\n jdbc {\n\t\t#input Configuration\n\t\tjdbc\_connection\_string =\> "jdbc:oracle:thin:@oraasgtd37-scan.nam.net:8889/CW1S"\n\t\tjdbc\_user =\> "ACT"\n\t\tjdbc\_password =\> "rc\_op"\n\t\tjdbc\_driver\_library =\> "I:\Jars\ojdbc6.jar"\n\t\tjdbc\_driver\_class =\> "Java::oracle.jdbc.driver.OracleDriver"\n\t\tstatement =\> "select ALERT\_ID, regexp\_replace(regexp\_substr(html\_file\_key ,'\<elem name="", :backtrace=\>["I:/GDPR/logstash-6.6.0/logstash-core/lib/logstash/compiler.rb:41:in `compile_imperative'", "I:/GDPR/logstash-6.6.0/logstash-core/lib/logstash/compiler.rb:49:in`compile\_graph'", "I:/GDPR/logstash-6.6.0/logstash-core/lib/logstash/compiler.rb:11:in `block in compile_sources'", "org/jruby/RubyArray.java:2486:in`map'", "I:/GDPR/logstash-6.6.0/logstash-core/lib/logstash/compiler.rb:10:in `compile_sources'", "org/logstash/execution/AbstractPipelineExt.java:149:in`initialize'", "I:/GDPR/logstash-6.6.0/logstash-core/lib/logstash/pipeline.rb:22:in `initialize'", "I:/GDPR/logstash-6.6.0/logstash-core/lib/logstash/pipeline.rb:90:in`initialize'", "I:/GDPR/logstash-6.6.0/logstash-core/lib/logstash/pipeline\_action/create.rb:42:in `block in execute'", "I:/GDPR/logstash-6.6.0/logstash-core/lib/logstash/agent.rb:92:in`block in exclusive'", "org/jruby/ext/thread/Mutex.java:148:in `synchronize'", "I:/GDPR/logstash-6.6.0/logstash-core/lib/logstash/agent.rb:92:in`exclusive'", "I:/GDPR/logstash-6.6.0/logstash-core/lib/logstash/pipeline\_action/create.rb:38:in `execute'", "I:/GDPR/logstash-6.6.0/logstash-core/lib/logstash/agent.rb:317:in`block in converge\_state'"]}

Please help me to resolve this.

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [March 7, 2019, 2:37pm UTC](https://discuss.elastic.co/t/how-to-escape-character-in-logstash/171327/2 "2019-03-07T14:37:18Z")

</div>

> [@mandar.raj](#):
>
> Expected one of #, {, } at line 11, column 91 (byte 436) after # JDBC -\> Logstash -\> Elasticsearch pipeline.\n\ninput {\n jdbc {\n\t\t#input Configuration\n\t\tjdbc\_connection\_string =\> "jdbc:oracle:thin:@oraasgtd37-scan.nam.net:8889/CW1S"\n\t\tjdbc\_user =\> "ACT"\n\t\tjdbc\_password =\> "rc\_op"\n\t\tjdbc\_driver\_library =\> "I:\Jars\ojdbc6.jar"\n\t\tjdbc\_driver\_class =\> "Java::oracle.jdbc.driver.OracleDriver"\n\t\tstatement =\> "select ALERT\_ID, regexp\_replace(regexp\_substr(html\_file\_key ,'\<elem name=""

That looks like you have a double quote inside a string surrounded by double quotes. You need to escape it using \ or else change it to single quotes.

---

<div class="post-metadata">

**Author:** ![mandar.raj](https://avatars.discourse-cdn.com/v4/letter/m/82dd89/32.png) [@mandar.raj](https://discuss.elastic.co/u/mandar.raj)\
**Post date:** [March 7, 2019, 3:28pm UTC](https://discuss.elastic.co/t/how-to-escape-character-in-logstash/171327/3 "2019-03-07T15:28:58Z")

</div>

Thanks Badger. Its worked 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 4, 2019, 3:29pm UTC](https://discuss.elastic.co/t/how-to-escape-character-in-logstash/171327/4 "2019-04-04T15:29:05Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.