# When using KV in logstash, I am getting my key with escaped character, how do i read this value in the Ruby?

**URL:** <https://discuss.elastic.co/t/when-using-kv-in-logstash-i-am-getting-my-key-with-escaped-character-how-do-i-read-this-value-in-the-ruby/251845>\
**Category:** Logstash\
**Created:** [October 13, 2020, 6:09am UTC](https://discuss.elastic.co/t/when-using-kv-in-logstash-i-am-getting-my-key-with-escaped-character-how-do-i-read-this-value-in-the-ruby/251845 "2020-10-13T06:09:52Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![mastersmit](https://avatars.discourse-cdn.com/v4/letter/m/f475e1/32.png) [@mastersmit](https://discuss.elastic.co/u/mastersmit)\
**Post date:** [October 13, 2020, 6:09am UTC](https://discuss.elastic.co/t/when-using-kv-in-logstash-i-am-getting-my-key-with-escaped-character-how-do-i-read-this-value-in-the-ruby/251845/1 "2020-10-13T06:09:52Z")

</div>

I have data coming from Kafka, and the data will look like this:

```
   "x-vcap-request-id":"smitshah",
   "x-cf-applicationid":"test",
   "x-cf-instanceid":"test2",
   "sec-ch-ua":"\"something\";\"willwork\""

```

It is similiar to JSON but it is not. So i thought of using KV filter,

```
kv {
 source => "header_v1"
value_split => ":"
field_split => ","
}

```

But now i am getting key this way:

 ![photo_2020-10-13_14-03-44](https://us1.discourse-cdn.com/elastic/original/3X/4/e/4ea2818bad9e4094346cb3e358af05f00cde2fe5.jpeg)

So when i do `event.get('\"x-vcap-request-id\"')` but i am getting empty result.

How can i resolve this?

---

<div class="post-metadata">

**Author:** ![mastersmit](https://avatars.discourse-cdn.com/v4/letter/m/f475e1/32.png) [@mastersmit](https://discuss.elastic.co/u/mastersmit)\
**Post date:** [October 13, 2020, 12:12pm UTC](https://discuss.elastic.co/t/when-using-kv-in-logstash-i-am-getting-my-key-with-escaped-character-how-do-i-read-this-value-in-the-ruby/251845/2 "2020-10-13T12:12:58Z")

</div>

I used the below which solved the problem:

```
kv {
        remove_char_key => "\""
}
```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 10, 2020, 12:13pm UTC](https://discuss.elastic.co/t/when-using-kv-in-logstash-i-am-getting-my-key-with-escaped-character-how-do-i-read-this-value-in-the-ruby/251845/3 "2020-11-10T12:13:05Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.