Hi all.
I have the following XML file format:
```
```
I have liked to give a custom ID to each of this object while indexing it into elasticsearch. The ID should be a combination of the Last Modified On + Object GUID. I'm not the Logstash expert, so it's why i'm asking here if some one can give me a small tip on how to realise it. I'm pretty sure it can be made with the Ruby plugin or the XML plugin but not sure what exactly to do.
PS: The attributes are very dynamic, the order is not always the same.
Cheers.
---
I would use a multiline codec for that
```
input { stdin { codec => multiline { pattern => "" negate => true what => "next" auto_flush_interval => 3 } } }
```
Then an xml filter
```
filter { xml { source => "message" store_xml => true target => "theXML" force_array => false } }
```
At that point you have a couple of choices. You could flatten the attributes using a ruby filter.
```
ruby {
code => '
event.get("[theXML][Attribute]").each { |v|
event.set("[Attributes]" + v["name"], v["value"])
}
'
}
```
Or you could iterate over the set and just stash the value you want in a temporary place, then use it to build the id.
```
ruby {
code => '
event.get("[theXML][Attribute]").each { |v|
if v["name"] == "Last Modified On"
event.set("[@metadata][lastModified]" , v["value"])
end
}
'
}
```
---