Remove Double quotes from field JSON file

Hi Community!!,

I need some help with this issue. Our source is a json file and one of these fields has this value:

"IF_NON_MATCH":""99914b932bd37a50b983c5e7c90ae93b""

I try remove the double quotes with gsub using these ways:

1 - mutate { gsub => ['[content][CustomData][IF_NON_MATCH]','""',' '] }

2 - mutate { gsub => ["[content][CustomData][IF_NON_MATCH]",""""," "] }

But it doesn't work, I receive this error:

[[main]<file] json - JSON parse error, original data now in message field {:error=>#<LogStash::Json::ParserError: Unexpected character ('9' (code 57)): was expecting comma to separate Object entries

Anybody know what is the right sintax?

Thank you ,

Best Regards

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.