# How to get rid of extra double quote

**URL:** https://discuss.elastic.co/t/how-to-get-rid-of-extra-double-quote/62820
**Category:** Logstash
**Created:** [October 12, 2016, 2:57pm UTC](https://discuss.elastic.co/t/how-to-get-rid-of-extra-double-quote/62820 "2016-10-12T14:57:43Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![trondhindenes](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/trondhindenes/32/10534_2.png) [@trondhindenes](https://discuss.elastic.co/u/trondhindenes)
#### Post date: [October 12, 2016, 2:57pm UTC](https://discuss.elastic.co/t/how-to-get-rid-of-extra-double-quote/62820/1 "2016-10-12T14:57:43Z")

</div>

I have this logstash filter I'm struggling with. Right now it comes out like this in rubydebug:  
{  
"type" =\> "log",  
"host" =\> "CY-C0D6E-006",  
"Date" =\> "2016-10-12",  
"Time" =\> "14:35:43.891",  
"computername" =\> ""Z49OS2SWB114T"",  
"serverIP" =\> "127.0.0.1",  
"method" =\> "GET",  
"uriStem" =\> "/iis/1/healthcheck/",  
}

My problems is that these fields will not always have the ", so I can't fix it in the grok filter, I have to do it afterwards in each field. However, I'm struggling to come up with a gsub statement that can help me.

Does anyone have any pointers on what I can do to normalize these strings?

best regards,  
Trond

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [October 12, 2016, 6:27pm UTC](https://discuss.elastic.co/t/how-to-get-rid-of-extra-double-quote/62820/2 "2016-10-12T18:27:48Z")

</div>

Should work:

```nohighlight
mutate {
  gsub => ["computername", '"', '']
}

```

---

<div class="post-metadata">

### Author: ![trondhindenes](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/trondhindenes/32/10534_2.png) [@trondhindenes](https://discuss.elastic.co/u/trondhindenes)
#### Post date: [October 13, 2016, 12:07pm UTC](https://discuss.elastic.co/t/how-to-get-rid-of-extra-double-quote/62820/3 "2016-10-13T12:07:49Z")

</div>

Thanks, I will try that

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 4:34am UTC](https://discuss.elastic.co/t/how-to-get-rid-of-extra-double-quote/62820/4 "2017-07-06T04:34:24Z")

</div>


