URL-decodes the contents of a string field.
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| field | string | Yes | The name of the input field with the value to url-decode. | |
| as | string | No | _urldecode | name of output field |
field is the unnamed parameter.
With an event with a field Bar=https%3A%2F%2Fwww.humio.com, you get https://www.humio.com in the _urldecode field
urlDecode("Bar")
With an event with a field Bar=https%3A%2F%2Fwww.humio.com, you get https://www.humio.com in the Foo field
Foo:=urlDecode("Bar")
With an event with a field Bar=https%3A%2F%2Fwww.humio.com, you get https://www.humio.com in the Foo field
urlDecode("Bar", as="Foo")