Logstash Encoding mistach


I am trying resolve an encoding problem using mutate gsub.

There are some words that display with error:

For instance Confirma\u00e7\u00eo, correct is Confirmacao. Then a used the following gsub:

mutate {
gsub => ["message","\u00e7\u00e0","cao"]}

But I still seeing error.

Can you help me?

Is there any codec to resolved it ?

I use phyton script and confirmed that encoding is unicode.


See this thread.


I've resolved it using gsub. I've created one file with many parsing like:

gsub => ["subject", "\\u00c3", "À"]

Don't resolve 100%, but resolved my problem about ineligible text.

Thank you.

Silas Muniz

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.