# How to remove quotation marks
**URL:** https://discuss.elastic.co/t/how-to-remove-quotation-marks/78919
**Category:** Logstash
**Created:** [March 16, 2017, 6:35pm UTC](https://discuss.elastic.co/t/how-to-remove-quotation-marks/78919 "2017-03-16T18:35:16Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@andre22](https://discuss.elastic.co/u/andre22)
#### Post date: [March 16, 2017, 6:35pm UTC](https://discuss.elastic.co/t/how-to-remove-quotation-marks/78919/1 "2017-03-16T18:35:16Z")
Hi,
the logs I am trying to parse contain some fields in quotation marks:
`2016-11-01 00:27:17.034 "157.55.39.145" - ....`
What I am trying is the following:
```
grok {
match => { "message" => "\A%{TIMESTAMP_ISO8601:eventtime} %{QUOTEDSTRING:c-IP-QS}...
match => { "c-IP-QS" => """%{IPORHOST:c-IP}""" }
```
I tried several ways to escape the quotation marks, without success.
```
'"
"\"
"""
```
How do I get rid of them?
Thanks a lot!
---
### Author:  [@andre22](https://discuss.elastic.co/u/andre22)
#### Post date: [March 16, 2017, 6:57pm UTC](https://discuss.elastic.co/t/how-to-remove-quotation-marks/78919/2 "2017-03-16T18:57:45Z")
Need to finish testing, but this looks like the solution: [https://www.elastic.co/guide/en/logstash/current/plugins-filters-mutate.html#plugins-filters-mutate-gsub](https://www.elastic.co/guide/en/logstash/current/plugins-filters-mutate.html#plugins-filters-mutate-gsub)
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 13, 2017, 6:58pm UTC](https://discuss.elastic.co/t/how-to-remove-quotation-marks/78919/3 "2017-04-13T18:58:06Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.