The original data in Logstash doesn't contain a full url. But it does contain fields for server (value of the Host header, if present) and url (value of Request path+query).
I used to combine these manually when creating Error tasks to create a full url. I didn't realise until now that the automation doesn't do this, and @Anomie kindly pointed out that this was a useful thing previously.