Handle nested xml file with logstash and ruby script

[balumurari1]

Hello humalog,

You can extend the below code to get the output required,

Is it possible to change output structure

The xml file which you have posted has an error, didnot close the tag <tag pluginname="LastUnauthenticatedResults">1539</tag> The input code is as follows as per your requirement, input { file { path => "D:/xxxxx/ELKStack/sample.xml" start_position => "beginning" sincedb_path => "NUL" codec => multiline { pattern => "" negate => "true" what => "previous" auto_flush_interval => 1 max_lines => 333333 } } } filter { xml { source => "message" target => "parsed" store_xml => "fal…