To see if there is at logstash urldecode plugin
execute the following command in the bin directory logstash installation of:
./logstash-plugin list
Can see logstash-filter-urldecode plug
If not, then you can execute the following command to install:
./bin/logstash-plugin install logstash-filter-urldecode
Then configure the conf file, on a field decode
start logstash, if you use ./bin/logstash -f 010.conf error, use the Change path.data path command to try:
./bin/logstash -f 010.conf --path.data=/root/
If there are other conf of logstash service starts, there will be a datapath, while the other started again to load the original default path, you need to specify a different path is not the same!