Help Logstash XML Parsing to Xpath

Elastic Stack Logstash
2

You would use an xml filter. Either store the whole XML

xml { source => "message" target => "theXML" force_array => false }

or pull parts of it out using xpath

    xml {
        source => "message"
        store_xml => false
        xpath => {
            "/NewData/Data/@ID" => "ID"
            "/NewData/Data/ClientConfig/ClientSetting/text()" => "Setting"
        }
    }

would get you

   "Setting" => [
    [0] "true",
    [1] "true",
    [2] "true",
    [3] "true",
    [4] "true"
],
        "ID" => [
    [0] "1234"
]