Remove Double quotes from field JSON file

Hi Community!!,

I need some help with this issue. Our source is a json file and one of these fields has this value:


I try remove the double quotes with gsub using these ways:

1 - mutate { gsub => ['[content][CustomData][IF_NON_MATCH]','""',' '] }

2 - mutate { gsub => ["[content][CustomData][IF_NON_MATCH]",""""," "] }

But it doesn't work, I receive this error:

[[main]<file] json - JSON parse error, original data now in message field {:error=>#<LogStash::Json::ParserError: Unexpected character ('9' (code 57)): was expecting comma to separate Object entries

Anybody know what is the right sintax?

Thank you ,

Best Regards

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.