How to decompress gzip field in message

Hi:

i have same problem ,my message as follows:

http.request.headers.accept: text/html,application/xhtml+xml,application/xml;
http.request.headers.accept-encoding: gzip, deflate
http.request.headers.accept-language: zh-CN,zh;q=0.9
http.request.headers.content-length: 0
http.request.headers.host: 192.168.0.147:8888
http.request.headers.referer: http://192.168.0.147:8888//nice%20ports,/Trinity.txt.bak
http.request.headers.user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_4) AppleWebKit/537.36 (KHTML, like Gecko)   	
http.response.body	   	���M-IT�())�M-,�,�U*JM+J-�PJ��+I�+�U230Pҷ����P�Q�eRY����P�ZQ��Q��c����XT�Zb[Z��k��6&#51D�d����]��������n;s�ǵ�6�Q��>L]R~J%H}�ݹ-W/m�{�����?o=ri��g��}�ש��?Y����[���|���-G�.^s�ƅC���x�����aW�ߺ�΁�W6.\l�_2Nf.ة@ɹ�
http.response.code: 200
http.response.headers.content-encoding: gzip

my env as follows:

  • Version: logstash 5.1.2
  • Operating System: CentOS Linux release 7.3.1611 (Core)

My needs :
decompress the http.response.body with gzip

somebody can help me ?

somebody can help you?

@magnusbaeck can you give same suggestion

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.