# Unenclosed quoted field on line 1 - frustrating error message

**URL:** https://discuss.elastic.co/t/unenclosed-quoted-field-on-line-1-frustrating-error-message/114959
**Category:** Logstash
**Created:** [January 10, 2018, 8:54pm UTC](https://discuss.elastic.co/t/unenclosed-quoted-field-on-line-1-frustrating-error-message/114959 "2018-01-10T20:54:56Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![dorj1234](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dorj1234/32/21339_2.png) [@dorj1234](https://discuss.elastic.co/u/dorj1234)
#### Post date: [January 10, 2018, 8:54pm UTC](https://discuss.elastic.co/t/unenclosed-quoted-field-on-line-1-frustrating-error-message/114959/1 "2018-01-10T20:54:56Z")

</div>

Hello,  
I wanted to share some frustration, and maybe even hope for a solution - the logs are extremely unhelpful when it comes to my specific logstash experience.  
Here is an example where logs tell me there is an un-enclosed quote. I checked; double checked, and could not locate such un-enclosed quote that is not handled in this message,  
however the parser provides this unhelpful log message and I don't see any problem with the text.

Any advice would be greatly appreciated.

`[2018-01-10T15:41:19,908][WARN][logstash.filters.csv] Error parsing csv {:field=>"message", :source=>"\"2017-12-17\";\"NA\";\"NY\";\"New York\";\"TEST1\";\"123ZLB\";\"VDI\";\"COMPANY\";\"TEST\";\"10-13-2017\";\"reported_item\";\"0\";\"N\";\"0\";\"N\";\"0.06\";\"0.20\";\"0.49\";\"30.38\";\"0\";\"2.08\";\"2.00\";\"2.08\";\"103.99\";\"0\";\"1.11\";\"552.64\";\"0.20\";\"553.75\";\"1.11\";\"1106.39\";\"0.10\";\"1107.50\";\"N\";\"N\";\"N\";\"N\";\"N\";\"N\";\"N\";\"N\";\"N\";\"N\";\"N\";\"N\";\"N\";\"N\";\"N\";\"N\";\"N\";\"N\";\"N\";\"N\";\"N\";\"N\";\"N\";\"N\r", :exception=>#<CSV::MalformedCSVError: Unclosed quoted field on line 1.>}`

---

<div class="post-metadata">

### Author: ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [January 10, 2018, 9:03pm UTC](https://discuss.elastic.co/t/unenclosed-quoted-field-on-line-1-frustrating-error-message/114959/2 "2018-01-10T21:03:01Z")

</div>

The value of message is show wrapped in double quotes. The last field is "N\r and that is an unclosed quoted field.

---

<div class="post-metadata">

### Author: ![dorj1234](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dorj1234/32/21339_2.png) [@dorj1234](https://discuss.elastic.co/u/dorj1234)
#### Post date: [January 10, 2018, 9:04pm UTC](https://discuss.elastic.co/t/unenclosed-quoted-field-on-line-1-frustrating-error-message/114959/3 "2018-01-10T21:04:30Z")

</div>

Thank you !

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [February 7, 2018, 9:04pm UTC](https://discuss.elastic.co/t/unenclosed-quoted-field-on-line-1-frustrating-error-message/114959/4 "2018-02-07T21:04:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.