# Illegal quoting in line (When i use " in csv file)
**URL:** https://discuss.elastic.co/t/illegal-quoting-in-line-when-i-use-in-csv-file/90908
**Category:** Logstash
**Created:** [June 27, 2017, 4:47am UTC](https://discuss.elastic.co/t/illegal-quoting-in-line-when-i-use-in-csv-file/90908 "2017-06-27T04:47:51Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@Yimjunhyeok](https://discuss.elastic.co/u/Yimjunhyeok)
#### Post date: [June 27, 2017, 4:47am UTC](https://discuss.elastic.co/t/illegal-quoting-in-line-when-i-use-in-csv-file/90908/1 "2017-06-27T04:47:51Z")
I use Logstash 5.4.1
This is my log
1498530290428|172.16.110.65|119.205.238.31|55081|80||||10|1|0|1|0|0|0|HTTP/1.1|www.dreamsearch.or.kr|/servlet/nateWebServlet?s=8375|Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36|http://news.nate.com/etc/adRightSpace?mid=n0500|0|0|KR||_|!|#||SCOUTER=x7hs42eqvulj23; Start\_Time=2016081810; kakao\_uid=NONE; reffer\_domain="NONE(20170627102828)|NONE(20170627102827)|NONE(20170627102823)|NONE(20170627102823)|NONE(20170627102821)"; ic\_hu=16#[news.topickorea.co.kr](http://news.topickorea.co.kr); ic\_um=[news.topickorea.co.kr](http://news.topickorea.co.kr); RTB\_ABC=A; RTB\_EC=E; IP\_info=211.52.1.3.49807566; au\_id=639a14a16985f8b5-78890f92158994388bc778c; shop\_log\_hold\_sync=1; ic\_ki=7IaM66eM7IKsIO2BtOudvOyasOuTnA|_|!|#||
This is an error message:
:exception=\>#\< CSV::MalformedCSVError: Illegal quoting in line 1. \>
Details are below
15:17:53.190 [[main]\>worker3] WARN logstash.filters.csv - Error parsing csv {:field=\>"message", :source=\>"1498530290428|172.16.110.65|119.205.238.31|55081|80||||10|1|0|1|0|0|0|HTTP/1.1|www.dreamsearch.or.kr|/servlet/nateWebServlet?s=8375|Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36|http://news.nate.com/etc/adRightSpace?mid=n0500|0|0|KR||_|!|#||SCOUTER=x7hs42eqvulj23; Start\_Time=2016081810; kakao\_uid=NONE; reffer\_domain=\\"NONE(20170627102828)|NONE(20170627102827)|NONE(20170627102823)|NONE(20170627102823)|NONE(20170627102821)\\"; ic\_hu=16#[news.topickorea.co.kr](http://news.topickorea.co.kr); ic\_um=[news.topickorea.co.kr](http://news.topickorea.co.kr); RTB\_ABC=A; RTB\_EC=E; IP\_info=211.52.1.3.49807566; au\_id=639a14a16985f8b5-78890f92158994388bc778c; shop\_log\_hold\_sync=1; ic\_ki=7IaM66eM7IKsIO2BtOudvOyasOuTnA|_|!|#||", :exception=\>#\< CSV::MalformedCSVError: Illegal quoting in line 1. \>}
In my opinion, it is related to "Logstash ==\> Filter ==\> csv ==\> quote\_char"
I try to change quote\_char, ex: quote\_char =\> "`"
But error occur again.
Please help me 🙂
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [June 27, 2017, 5:38am UTC](https://discuss.elastic.co/t/illegal-quoting-in-line-when-i-use-in-csv-file/90908/2 "2017-06-27T05:38:37Z")
If you look at what you just posted there is no error message. If you format that paragraph as preformatted text (see button in toolbar) the text between `<` and `>` won't be hidden.
Maybe the csv filter doesn't like the long column that begins with "SCOUTER=". If that's the case, perhaps you should try using a grok filter instead? Or a mutate filter's split option?
---
### Author:  [@Yimjunhyeok](https://discuss.elastic.co/u/Yimjunhyeok)
#### Post date: [June 27, 2017, 6:16am UTC](https://discuss.elastic.co/t/illegal-quoting-in-line-when-i-use-in-csv-file/90908/3 "2017-06-27T06:16:32Z")
Oh my mistake. i edit my posting. In my think, when i use " in csv file, error occur.
---
### Author:  [@Yimjunhyeok](https://discuss.elastic.co/u/Yimjunhyeok)
#### Post date: [July 6, 2017, 10:52am UTC](https://discuss.elastic.co/t/illegal-quoting-in-line-when-i-use-in-csv-file/90908/4 "2017-07-06T10:52:07Z")
I find !
Use this in Input field
delimiter =\> " "
Default is \n
Change it other value.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 3, 2017, 10:57am UTC](https://discuss.elastic.co/t/illegal-quoting-in-line-when-i-use-in-csv-file/90908/5 "2017-08-03T10:57:58Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.