HI Team, I'm just working on new type of XML file. I have some array information in that file i want to gather all those data.. This array fields are repeating with same tags due to this while processing the log the i'm getting empty array value and help me to concat all the value and store in a fi…

HI magnus, Actually im getting empty value on that field instead of that i want to get the repeated value in the array . For example, you can find the field "ChannelCode" thrice in above my example, i want to capture all the three value in to respective field. This is what i want to do it. curren…

If the XML element begin with "5:" I'd expect you to have to include that in the XPath expression. If you provide the actual XML file (or parts of it) and the exact xml filter you use it'll be easier to help out. Make sure you format both as preformatted text when posting so that the forum software …

what i mentioned is exact xml and when it not comes in array format its working fine and im getting event. like this <5:ChannelCode>Cell <5:CompleteNumber>231 <5:UseCode>Cell when my input is repeat more than once im facing this issue

What you posted contains no closing tags so it can't possibly be the exact same as your input. I'm trying to reproduce your problem but then I need to know exactly what your input looks like. You also haven't posted exactly what the resulting event looks like.

In the below sample i need to capture all the description text into one field how could i process it, Please find the below input <_9:BODSuccessMessage> <_9:WarningProcessMessage> <_9:Description>/p:ProcessRepairOrderType[1]/p:ProcessRepairOrderDataArea[1]/p:…

This appears to work: filter { xml { store_xml => false source => "message" xpath => ["//*[local-name()='Description']/text()", "description"] } } This is clumsy and will not work if you have other Description elements in your document besides these in the "_9" namespace. It seems …

HI Magnus, i tried above method also but it gives same result for me , which i got earlier.

Please give a complete reproducible recipe for your problem, i.e. an input string, a complete configuration, and the output you get.

Ok please find the input and config detail, Input: <?xml version="1.0" encoding="UTF-8"?> <p:ServiceMessageObject > <_5:ConfirmBOD releaseID="5.4.4"> <_5:ConfirmBODDataArea> <_5:BOD> <_9:BODSuccessMessage> …

Discuss the Elastic Stack

Concat the XML array value in logstash

Elastic Stack Logstash

magnusbaeck (Magnus Bäck) February 8, 2017, 10:59am 16

I said: format all logs, configuration, and any XML as preformatted text with the </> toolbar button when posting.

Topic		Replies	Views
Concat the XML array in logstash Logstash	1	508	January 13, 2017
XML Filter Help Required Logstash	7	7741	July 6, 2017
Logstash XML Filter Plugin - XML Parsing General Question Logstash	6	224	June 19, 2024
XML to Elasticsearch via Logstash Logstash	47	3643	April 3, 2018
How to split xml arrays? Logstash	15	7678	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Concat the XML array value in logstash

Related topics