Mcfee Epo XMl part contains unwanted \".How to remove this

Elastic Stack Logstash
1

Mcafee EPO XML part contains extra " " " .Because of this xml become invalid. i would like to replace " with ". is that possible.i tried with Gsub
mutate {
gsub => [ "syslog5424_msg","[\"]", """]
}
its not working

please advise on this

2

i want to replace \" together to "

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.