How to indexing to elastic specific tag of xml?

Elastic Stack Logstash
1

How to indexing to elastic specific tag of xml?
I want to index specific tag only from below xml format could you please help me?

<records<record<details<furtherinformation

2

If you have an event that looks like

<records><record><details><furtherinformation>Foo</furtherinformation></details></record></records>

You can use an xml filter to parse it. For example

    xml {
        source => "message"
        store_xml => false
        xpath => { "/records/record/details/furtherinformation/text()" => "FurtherInformation" }
        remove_field => [ "message" ]
    }

will get you

"FurtherInformation" => [
    [0] "Foo"
]
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.