Convert Journald array of numbers to string

[barcar]

I have a docker container which outputs logs with ANSI colors. When forwarding via journald the body_message which looks something like this:

uptime-kuma | 2025-03-03T08:25:10Z [AUTH] INFO: WebSocket with no origin is allowed

shows up as an array of numbers:

"body_message": "[\"27\",\"91\",\"51\",\"54\",\"109\",\"50\",\"48\",\"50\",\"53\",\"45\",\"48\",\"51\",\"45\",\"48\",\"51\",\"84\",\"48\",\"56\",\"58\",\"48\",\"53\",\"58\",\"52\",\"52\",\"90\",\"27\",\"91\",\"48\",\"109\",\"32\",\"91\",\"27\",\"91\",\"51\",\"56\",\"59\",\"53\",\"59\",\"49\",\"49\",\"57\",\"109\",\"77\",\"79\",\"78\",\"73\",\"84\",\"79\",\"82\",\"27\",\"91\",\"48\",\"109\",\"93\",\"32\",\"27\",\"91\",\"51\",\"51\",\"109\",\"87\",\"65\",\"82\",\"78\",\"58\",\"27\",\"91\",\"48\",\"109\",\"32\",\"77\",\"111\",\"110\",\"105\",\"116\",\"111\",\"114\",\"32\",\"35\",\"49\",\"56\",\"55\",\"32\",\"39\",\"76\",\"105\",\"118\",\"105\",\"110\",\"103\",\"32\",\"82\",\"111\",\"111\",\"109\",\"39\",\"58\",\"32\",\"70\",\"97\",\"105\",\"108\",\"105\",\"110\",\"103\",\"58\",\"32\",\"67\",\"104\",\"105\",\"108\",\"100\",\"32\",\"105\",\"110\",\"97\",\"99\",\"99\",\"101\",\"115\",\"115\",\"105\",\"98\",\"108\",\"101\",\"32\",\"124\",\"32\",\"73\",\"110\",\"116\",\"101\",\"114\",\"118\",\"97\",\"108\",\"58\",\"32\",\"54\",\"48\",\"32\",\"115\",\"101\",\"99\",\"111\",\"110\",\"100\",\"115\",\"32\",\"124\",\"32\",\"84\",\"121\",\"112\",\"101\",\"58\",\"32\",\"103\",\"114\",\"111\",\"117\",\"112\",\"32\",\"124\",\"32\",\"68\",\"111\",\"119\",\"110\",\"32\",\"67\",\"111\",\"117\",\"110\",\"116\",\"58\",\"32\",\"48\",\"32\",\"124\",\"32\",\"82\",\"101\",\"115\",\"101\",\"110\",\"100\",\"32\",\"73\",\"110\",\"116\",\"101\",\"114\",\"118\",\"97\",\"108\",\"58\",\"32\",\"48\"]"

Is there a way in a pipeline/function to convert this to a legible string? I can't figure it out.

[pront]

This sounds like a problem with how longs are ingested into the Vector pipeline. Perhaps you can take a look at https://vector.dev/docs/reference/vrl/functions/#decode_charset.