# How to present table, based on multiline xml fields

**URL:** <https://discuss.elastic.co/t/how-to-present-table-based-on-multiline-xml-fields/276357>\
**Category:** Logstash\
**Created:** [June 18, 2021, 9:16am UTC](https://discuss.elastic.co/t/how-to-present-table-based-on-multiline-xml-fields/276357 "2021-06-18T09:16:40Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![rubic](https://avatars.discourse-cdn.com/v4/letter/r/ec9cab/32.png) [@rubic](https://discuss.elastic.co/u/rubic)\
**Post date:** [June 18, 2021, 9:16am UTC](https://discuss.elastic.co/t/how-to-present-table-based-on-multiline-xml-fields/276357/1 "2021-06-18T09:16:40Z")

</div>

Hi,

I'm struggling with creating simple table in lens, which could present my data from ingested, multiline xml file. Basically I don't need to apply any aggregations. I'm wondering if there is any kind of solution?

My xml structure:

```auto
-<rxxxxxx>

<run for="00:00:39.891" aj="17-06-2021 14:29:04" sq="17-06-2021 14:29:44" opr="521703952" st="OK" ald="1" wf="wf_XXXX_XX_X_X"/>

<run for="00:01:05.056" aj="17-06-2021 14:28:04" sq="17-06-2021 14:29:09" opr="421703960" st="NOK" ald="2" wf="wf_XXXX_XXXXXXXXX_XX_X_X"/>

<run for="00:00:14.279" aj="17-06-2021 14:28:04" sq="17-06-2021 14:28:18" opr="221703474" st="OK" ald="2" wf="wf_XXXX_XXXXXXXXX_XX_X_X"/>

</rxxxxxx>`

```

My logstash config just reads "message" filed and based on that, creates new text fields for all xml entries using this naming convention: xml.run.sourcefieldname, ingested fields are multiline:

```auto
else if "xml_input" in [tags] {
    xml { 
      source => "message" 
      target => "xml" 
    }

```

I also tried to apply some datatype conversion in grok / mutate but seems like it does not move me closer towards resolution..

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 16, 2021, 9:16am UTC](https://discuss.elastic.co/t/how-to-present-table-based-on-multiline-xml-fields/276357/2 "2021-07-16T09:16:58Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.