Urldecode plugin for ingest node?


#1

Just wondering if there is a plan to bring this or any other workaround to have the same result?

We are in need to parse the apache log and user don't really like the encoded URL string on the output.

We can do it easily in logstash with urldecode, so just hoping there's a way to do this with ingest node.


(Tal Levy) #2

Probably not for 5.0 release, might be a potential candidate for a new processor later on if it makes sense. Right now, a workaround can be implemented in the GsubProcessor with a regex replacement that matches the url escaped characters


(system) #3