\","modified":1507908845773}}
the filter in my config that I'm using is the following:
filter {
```
xml {
store_xml => "false"
source => "message"
remove_namespaces => "false"
xpath =>[
"/data1/type/text()","type",
"/year/content/text()","year",
]
```
}
}
So, after applying the config I see the same json message content. Also, is there any possibility in logstash to remove the backslashes which are there for whitespaces in my xml?
Cheers
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [October 16, 2017, 6:12am UTC](https://discuss.elastic.co/t/convert-json-to-xml/103863/8 "2017-10-16T06:12:54Z")
You're attempting to parse the `message` field as XML but it appears the XML is actually in the `[payload][xml]` field.
---
### Author:  [@rm1890](https://discuss.elastic.co/u/rm1890)
#### Post date: [October 16, 2017, 7:43am UTC](https://discuss.elastic.co/t/convert-json-to-xml/103863/9 "2017-10-16T07:43:43Z")
is there any possibiltiy to apply a filter on payload?
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [October 16, 2017, 8:04am UTC](https://discuss.elastic.co/t/convert-json-to-xml/103863/10 "2017-10-16T08:04:41Z")
It depends on what you want to do but the answer is probably yes.
---
### Author:  [@rm1890](https://discuss.elastic.co/u/rm1890)
#### Post date: [October 16, 2017, 8:08am UTC](https://discuss.elastic.co/t/convert-json-to-xml/103863/11 "2017-10-16T08:08:10Z")
I acutally want to extract some values from [payload] : [XML]. For instance, the type and year es mentioned in previous example. I assume XPATH won't be able to extract the data directly from payload, so I need other filters perhaps?
Cheers
---
### Author:  [@rm1890](https://discuss.elastic.co/u/rm1890)
#### Post date: [October 16, 2017, 9:20am UTC](https://discuss.elastic.co/t/convert-json-to-xml/103863/12 "2017-10-16T09:20:08Z")
ok, I'm able to extract now the xml field from payload using the following filter in config file:
```
filter {
json {
source => "message"
target => "parsedMain"
}
json {
source => "[parsedMain][payload][xml]"
target => "parsedContent"
}
}
```
So, now I'm trying to use the json output, which is in this case the target "parsedContent", as a source for xml.
```
xml {
store_xml => "false"
source => "parsedContent"
remove_namespaces => "false"
xpath =>[
"/data1/type/text()","type",
"/year/content/text()","year",
]
}
```
It doesn't work though. I assume I'm doing something wrong?
Cheers
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [October 16, 2017, 10:26am UTC](https://discuss.elastic.co/t/convert-json-to-xml/103863/13 "2017-10-16T10:26:37Z")
Why are you trying to parse `[parsedMain][payload][xml]` as JSON? That's where the XML data is.
---
### Author:  [@rm1890](https://discuss.elastic.co/u/rm1890)
#### Post date: [October 16, 2017, 10:52am UTC](https://discuss.elastic.co/t/convert-json-to-xml/103863/14 "2017-10-16T10:52:38Z")
ok, I removed the json part and now parsing the `[parsedMain][payload][xml]` as XML, bust somehow it ignores the xpath. I mean it doesn't extract the data from XML.
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [October 16, 2017, 11:41am UTC](https://discuss.elastic.co/t/convert-json-to-xml/103863/15 "2017-10-16T11:41:46Z")
Perhaps the XPath query doesn't match the data? Or do you need to set `remove_namespaces => true`?
---
### Author:  [@rm1890](https://discuss.elastic.co/u/rm1890)
#### Post date: [October 16, 2017, 3:16pm UTC](https://discuss.elastic.co/t/convert-json-to-xml/103863/16 "2017-10-16T15:16:51Z")
It doesn't even remove the namespaces.
---
### Author:  [@rm1890](https://discuss.elastic.co/u/rm1890)
#### Post date: [October 17, 2017, 11:56am UTC](https://discuss.elastic.co/t/convert-json-to-xml/103863/17 "2017-10-17T11:56:01Z")
ok, just to let you know, it is solved. The solution was to use @ instead of text(). So, in my example the xml filter should have been like this:
```
xml {
store_xml => "false"
source => "parsedContent"
remove_namespaces => "false"
xpath =>[
"/data1/@type","type",
"/year/@content","year",
]
}
```
Cheers
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 14, 2017, 11:56am UTC](https://discuss.elastic.co/t/convert-json-to-xml/103863/18 "2017-11-14T11:56:08Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.