@anwar114 yes that can be done at index timee. You would want to update the props.conf and create a new csv sourcetype. Copy the current stanza key pair as data is being extracted correctly. The key pair you want to modify is this
FIELD_QUOTE = "
Update to
FIELD_QUOTE = '
if you're using inputs.conf and any other .conf file or searches, you would want to update the sourcetype reference to this new sourcetype.
... View more