Help parsing Xml File

[balumurari1]

hope this helps you,

Is it possible to change output structure

The xml file which you have posted has an error, didnot close the tag <tag pluginname="LastUnauthenticatedResults">1539</tag> The input code is as follows as per your requirement, input { file { path => "D:/xxxxx/ELKStack/sample.xml" start_position => "beginning" sincedb_path => "NUL" codec => multiline { pattern => "" negate => "true" what => "previous" auto_flush_interval => 1 max_lines => 333333 } } } filter { xml { source => "message" target => "parsed" store_xml => "fal…