# Issue parsing xml

**URL:** <https://discuss.elastic.co/t/issue-parsing-xml/175148>\
**Category:** Logstash\
**Created:** [April 3, 2019, 9:36am UTC](https://discuss.elastic.co/t/issue-parsing-xml/175148 "2019-04-03T09:36:53Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Vivek\_Sharma](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vivek_sharma/32/46948_2.png) [@Vivek\_Sharma](https://discuss.elastic.co/u/Vivek_Sharma)\
**Post date:** [April 3, 2019, 9:36am UTC](https://discuss.elastic.co/t/issue-parsing-xml/175148/1 "2019-04-03T09:36:53Z")

</div>

Hi

I have an xml with format as below:

```
<DummyXML xmlns="http://www.w3.org/1999/XSL/Transform" xmlns:abc="http://www.abc.com/xml/abc" xmlns:def="http://www.def.com/xml/def">
<Transaction>
	<abc:abcTransaction>
		<abc:BuildNumber>3.106.0.0</abc:BuildNumber>
		<abc:OnlineStatus>0</abc:OnlineStatus>
		<abc:TransactionType>15</abc:TransactionType>
		<abc:WorkstationLocation>SS</abc:WorkstationLocation>
		<abc:ExternalSystem>
			<abc:SequenceNumber>1234567890</abc:SequenceNumber>
		</abc:ExternalSystem>
		<def:RFN>9876543210</def:RFN>
	</abc:abcTransaction>
</Transaction>
</DummyXML>

```

I need to extract RFN field from the xml. Below is the snippet of the logstash I have written:

```
xml {
				source => "SourceMessage"
				remove_namespaces => "true"
				xpath => ["/DummyXML/Transaction/def:RFN/text()", "RFN"]
}

```

But logstash fails when parsing this file. Below is the snippet of the error that I am getting:

> [2019-04-03T14:57:43,373][FATAL][logstash.runner] An unexpected error occurred! {:error=\>#\<Nokogiri::XML::XPat  
> h::SyntaxError: /DummyXML/Transaction/def:RFN/text()\>,

Can anyone please help me in this.

Thanks

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [April 3, 2019, 1:57pm UTC](https://discuss.elastic.co/t/issue-parsing-xml/175148/2 "2019-04-03T13:57:00Z")

</div>

Try

```
xpath => ["/DummyXML/Transaction/abcTransaction/RFN/text()", "RFN"]
```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 1, 2019, 1:59pm UTC](https://discuss.elastic.co/t/issue-parsing-xml/175148/3 "2019-05-01T13:59:54Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.