Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

syntax for a grok mutate gsub to replace double quotes with single quotes

Tags:

logstash

Need a help

What is the syntax for using "grok mutate gsub" to replace double quotes with single quotes when using logstash.

Thanks,

like image 453
user2025329 Avatar asked Dec 25 '22 11:12

user2025329


1 Answers

Do you want this? The mutate filter will change all the double quote to single quote.

filter {    
    mutate {
        gsub => ["message","\"","'"]
    }
}
like image 99
Ben Lim Avatar answered Jan 30 '23 04:01

Ben Lim