Proper RegEx with Mutate>GSub

[Badger]

Having a backslash at the end of a string requires a trick. Use a character group that just includes backslash...

mutate { gsub => [ "[user][name]", "\w+[\\]{2}", "" ] }