Basic-parsing XML into logsash

Elastic Stack Logstash
1

I want to parse my XML document through logstash so that each document gets parsed differently..How to achieve this? For example: book id 101 becomes one document with parsed fields and book102 becomes another document with parsed fields?

<?xml version="1.0"?>
<catalog>
   <book id="bk101">
      <author>Gambardella, Matthew</author>
      <title>XML Developer's Guide</title>
      <genre>Computer</genre>
      <price>44.95</price>
      <publish_date>2000-10-01</publish_date>
      <description>An in-depth look at creating applications 
      with XML.</description>
   </book>
   <book id="bk102">
      <author>Ralls, Kim</author>
      <title>Midnight Rain</title>
      <genre>Fantasy</genre>
      <price>5.95</price>
      <publish_date>2000-12-16</publish_date>
      <description>A former architect battles corporate zombies, 
      an evil sorceress, and her own childhood to become queen 
      of the world.</description>
   </book>
2

Have you looked at the XML filter documentation?
https://www.elastic.co/guide/en/logstash/current/plugins-filters-xml.html

3

Yeah. But I am new to logstash so needed a basic example to work on.. if you could suggest a basic example or some link..it will be a great help :smile:

4

Try http://www.sixtree.com.au/articles/2014/intro-to-elk-and-capturing-application-logs/