# Use logstash to collect NextCloud Audit logs

**URL:** <https://discuss.elastic.co/t/use-logstash-to-collect-nextcloud-audit-logs/326928>\
**Category:** Logstash\
**Created:** [March 3, 2023, 10:44am UTC](https://discuss.elastic.co/t/use-logstash-to-collect-nextcloud-audit-logs/326928 "2023-03-03T10:44:42Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![GEHsu](https://avatars.discourse-cdn.com/v4/letter/g/c2a13f/32.png) [@GEHsu](https://discuss.elastic.co/u/GEHsu)\
**Post date:** [March 3, 2023, 10:44am UTC](https://discuss.elastic.co/t/use-logstash-to-collect-nextcloud-audit-logs/326928/1 "2023-03-03T10:44:42Z")

</div>

Use logstash to collect NextCloud Audit logs, Chinese word will become a word starting with % or \u, how to make it display normally

I have added filter {urldecode {all\_fields =\> true}}, Chinese starting with % are displayed normally but \uThe ones starting with \u are not displayed normally.

Is there any way to fix it?

![圖片 002](https://us1.discourse-cdn.com/elastic/original/3X/4/6/46ce233abb411a5a0dfc2d266e60183d073c910d.png)

 ![圖片 001](https://us1.discourse-cdn.com/elastic/original/3X/e/a/ea20013a141cdf2dd5f56ff48ea295fe22b4efbc.png)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 31, 2023, 10:45am UTC](https://discuss.elastic.co/t/use-logstash-to-collect-nextcloud-audit-logs/326928/2 "2023-03-31T10:45:15Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.