My log look like this which is "|" separated. The log consist of id, status, request, response fields. The request and response are present in XML data which are "|" separated. 110000|read|<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:web="http://webservices.lo…

Correct configuration file for XML input

magnusbaeck (Magnus Bäck) August 28, 2017, 1:59pm 8

Use what => "previous" in your multiline codec.

Topic		Replies	Views
Not able to parse custom logs having multi line xml Logstash	15	4296	December 22, 2017
Parsing multiline logs : line + xml Logstash	10	6721	July 6, 2017
How to read XML logs Logstash	10	1000	November 22, 2017
Please Suggest the config file for the XML data to load in logstash Logstash	11	2294	August 22, 2017
Using logstash Logstash	8	1821	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Correct configuration file for XML input

Related topics