# Logstash columns format

**URL:** https://discuss.elastic.co/t/logstash-columns-format/175065
**Category:** Logstash
**Created:** [April 2, 2019, 7:53pm UTC](https://discuss.elastic.co/t/logstash-columns-format/175065 "2019-04-02T19:53:52Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![He\_Pamela](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/he_pamela/32/42370_2.png) [@He\_Pamela](https://discuss.elastic.co/u/He_Pamela)
#### Post date: [April 2, 2019, 7:53pm UTC](https://discuss.elastic.co/t/logstash-columns-format/175065/1 "2019-04-02T19:53:52Z")

</div>

Hi, I have this issue. I'm trying to send a CSV file to Elasticsearch using logstash. This is the log I get:

`[2019-04-02T14:22:18,470][WARN][logstash.filters.csv] Error parsing csv {:field=&gt;"message", :source=&gt;"GrupoConsist encia CG_EMPODERAMIENTO\",00000,GREEN,New\r", :exception=&gt;#&lt;CSV::MalformedCSVError: Illegal quoting in line 1.&gt;} [2019-04-02T14:22:18,476][WARN][logstash.filters.csv] Error parsing csv {:field=&gt;"message", :source=&gt;"3ffcb8c1-229 b-4575-8373-00f014df1b69,3/31/2019 12:30:23 AM,EPM\\aseverid,Regla RecoverPoint Custom,\"Event Description: \r", :except ion=&gt;#&lt;CSV::MalformedCSVError: Unclosed quoted field on line 1.&gt;}`

I think this is due to I have a column **AlertDescription** when the data comes is like this :

> Event Description:  
> @Operaciones por favor escalar "Gren" si el código de identificación se encuentra en la matriz
> 
> CodigoIdentificacion '4008'  
> GrupoConsistencia CG\_EMPODERAMIENO

Does Logstash support this kind of columns with spaces and special characters or not?

Thanks!

---

<div class="post-metadata">

### Author: ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [April 2, 2019, 8:39pm UTC](https://discuss.elastic.co/t/logstash-columns-format/175065/2 "2019-04-02T20:39:11Z")

</div>

```
GrupoConsist encia CG_EMPODERAMIENTO",00000,GREEN,New\r

```

You cannot have a closing double quote without a matching opening double quote. That is "Illegal quoting".

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 30, 2019, 8:45pm UTC](https://discuss.elastic.co/t/logstash-columns-format/175065/3 "2019-04-30T20:45:55Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.