Hi I'm wondering how can I can parse below structure of XML in logstash as XML in the single event. Maybe in that case would be use fluentd.??? This logs will be upload by filebeat. here it is worth mentioning that the objects which are in measinfo field have measType values which change dynamical…

OK, so you have a five megabyte XML object. I read that in as a single event using a file input with a multiline codec. I had to add max_lines => 300000 max_bytes => 6000000 to the codec. I parse the XML using xml { source => "message" target => "theXML" store_xml => true remove_field => [ "message…

Discuss the Elastic Stack

How to parase xml in logstash

Elastic Stack Logstash

Badger September 27, 2021, 2:13pm 2

There are quite a few threads about this in this forum. Here is an example of parsing it using an xml filter and reformatting the data.

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.