Urldecode prefix fields support

mcanes commented 9 years ago

It can be useful to decode parameters from urls. Right now, splitting url parameters it's extremely easy using the KV filter, but not decode the parameters values.

Let's put an example using: foo.com/bar?param1=value1&...&paramN=valueN

filters {
  ... # Split url using grok URI pattern or similar

   kv {
     source => "uriparams"
     field_split => "&?"
     prefix => "params_"
   }

   urldecode {
     field_prefix => "params_"
   }
}

With this we can url decode all params using one filter and supporting url params dynamically.

Original issue: https://github.com/elastic/logstash/issues/3273

ajhalani commented 9 years ago

+1. This would be pretty useful.

fbaligand commented 7 years ago

+100 !

adamkulcsar commented 7 years ago

+1

hamlet-lee commented 5 years ago

+1

logstash-plugins / logstash-filter-urldecode

Urldecode prefix fields support #2