URL-decodes the contents of a string field.

ParameterTypeRequiredDefaultDescription
asstringfalse_urldecodeName of output field.
fieldstringtrue The name of the input field with the value to url-decode.

Examples

With an event with a field Bar=https%3A%2F%2Fwww.humio.com, you get https://www.humio.com in the _urldecode field:

humio
urlDecode("Bar")

With an event with a field Bar=https%3A%2F%2Fwww.humio.com, you get https://www.humio.com in the Foo field:

humio
Foo:=urlDecode("Bar")

With an event with a field Bar=https%3A%2F%2Fwww.humio.com, you get https://www.humio.com in the Foo field:

humio
urlDecode("Bar", as="Foo")