Drilldown-url issue

Hi:

Yes the url is formed on Peoplesoft, and it is sent through integration broker to logstash, somehow during this step url is modified.
I believe that it is peoplesoft the one changing it but when we check the query or the Search definition preview we get the correct url.

Example:

What we see at Query level and in Search Definition data preview:

http:/ /150.53.112.105:31270/psc/fs92dev_newwin/EMPLOYEE/ERP/c/PROCESS_JOURNALS.JOURNAL_ENTRY_IE.GBL?Action=U&BUSINESS_UNIT=XXXXX&JOURNAL_ID=0000638&JOURNAL_DATE=2024-06-15&UNPOST_SEQ=0

Vs what arrives to Elastic:

http:// myserver/psc/ps_newwin/EMPLOYEE/ERP/c/PROCESS_JOURNALS.JOURNAL_ENTRY_IE.GBL?Action=U&BUSINESS_UNIT=XXXXX&JOURNAL_ID=0000638&JOURNAL_DATE=2024-06-15&UNPOST_SEQ=0

The url on Peoplesoft side is assembled dynamically so I think we are missing one configuration.

I was wondering if someone had this same issue at some point.