# Tab character in json input message is not validated and complete message gets wrapped in the message field in elastic search

**URL:** <https://discuss.elastic.co/t/tab-character-in-json-input-message-is-not-validated-and-complete-message-gets-wrapped-in-the-message-field-in-elastic-search/303727>\
**Category:** Elasticsearch\
**Created:** [May 2, 2022, 9:23am UTC](https://discuss.elastic.co/t/tab-character-in-json-input-message-is-not-validated-and-complete-message-gets-wrapped-in-the-message-field-in-elastic-search/303727 "2022-05-02T09:23:40Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Nikhitha](https://avatars.discourse-cdn.com/v4/letter/n/ba9def/32.png) [@Nikhitha](https://discuss.elastic.co/u/Nikhitha)\
**Post date:** [May 2, 2022, 9:23am UTC](https://discuss.elastic.co/t/tab-character-in-json-input-message-is-not-validated-and-complete-message-gets-wrapped-in-the-message-field-in-elastic-search/303727/1 "2022-05-02T09:23:40Z")

</div>

input json message to logstash via filebeat is  
"{"version":"1.0.0","timestamp":"2022-01-19T12:24:10+00:00","severity":"debug","service\_id":"logger","message":"(tab space)shaaaaaaaaa222aaaaw1111wwaaaaj3322222jj1"}"

ouptut in Elasticsearch:  
"message" : "{"version":"1.0.0","timestamp":"2022-01-19T12:24:10+00:00","severity":"debug","service\_id":"logger","message":" **\t** shaaaaaaaaa222aaaaw1111wwaaaaj3322222jj1"}",

How can we avoid \t in message with proper validation?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 30, 2022, 9:24am UTC](https://discuss.elastic.co/t/tab-character-in-json-input-message-is-not-validated-and-complete-message-gets-wrapped-in-the-message-field-in-elastic-search/303727/2 "2022-05-30T09:24:33Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.