Heartbeat (webservice response)

[mustafa.husny (mustafa)]

First my ELK stack version is 7.6.2
My approach is save the heartbeat logs and search in the body.content filed for status code , so i made the following config

• type: http
  #SOAP/HTTP
  id: my-webservice
  name: my-webservice
  urls: ["x.x.x.x"]
  check.request.method: POST
  check.request.headers:
  soapaction: 'Get'
  content-type: 'text/xml; charset=utf-8'
  check.request.body: 'soap request'
  response.include_body: always
  response.include_body_max_bytes: 2048
  processors:
  • decode_json_fields:
    fields: ["http.response.body.content"]
    schedule: '@every 5s'

now i can check the xml for the response and want to validate for my service response not the web status (not status 200 my service response like 35) in defined tag

how can i do this final step