How to correctly parse and then enrich log data in Logstash?

Do you have a pattern for the log already?
If so you should be able to split the URL field into parts.