From 8181858385efdc099b9ac517afe58ef6d1ba18a6 Mon Sep 17 00:00:00 2001
From: Bharat Pasupula <123897612+bhapas@users.noreply.github.com>
Date: Wed, 5 Feb 2025 13:52:04 +0100
Subject: [PATCH] [Automatic Import] Fix Structured log template to use single
 quotes (#209736)

## Release Note

Fix Structured log template to use single quotes

### Summary

Currently with a single backslash as escape character the template is
setting up a double quote surrounding it and it causes YAML Exception
```
 1 |   - kv:
 2 |       field: message
 3 |       field_split: "\|"
--------------------------^

YAMLException: unknown escape sequence (3:22)
```

This PR fixes to use single quotes to not break YAML parsing.
---
 .../server/templates/processors/kv.yml.njk             | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/x-pack/platform/plugins/shared/automatic_import/server/templates/processors/kv.yml.njk b/x-pack/platform/plugins/shared/automatic_import/server/templates/processors/kv.yml.njk
index a1df35878e7f7..83091c25802af 100644
--- a/x-pack/platform/plugins/shared/automatic_import/server/templates/processors/kv.yml.njk
+++ b/x-pack/platform/plugins/shared/automatic_import/server/templates/processors/kv.yml.njk
@@ -1,7 +1,7 @@
   - kv:
       field: message
-      field_split: "{{ kvInput.field_split }}"
-      value_split: "{{ kvInput.value_split }}"
-      trim_key: "{{ kvInput.trim_key }}"
-      trim_value: "{{ kvInput.trim_value }}"
-      target_field: "{{ packageName }}.{{ dataStreamName }}"
+      field_split: '{{ kvInput.field_split }}'
+      value_split: '{{ kvInput.value_split }}'
+      trim_key: '{{ kvInput.trim_key }}'
+      trim_value: '{{ kvInput.trim_value }}'
+      target_field: '{{ packageName }}.{{ dataStreamName }}'