So, in this thread , I was able to get an initial config working, but ran into an issue parsing the data in that there are different events, which results in different data fields. Is there a way to handle these fields dynamically? If not, I assume it will be with if/else conditions in the filter, bu…

Not quite ruby { code => ' event.get("[xml_content][EventData][Data]").each { |a| name = a["Name"] value = a["content"] #event.set( "[someField][#{name}]", value) event.set( "[eventData.#{name}]", value) } ' } You have the option whether to put t…

Logstash XML parsing issues - trying to send to Graylog, part 2

Elastic Stack Logstash

system (system) Closed August 28, 2019, 8:46pm 6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Logstash XML parsing issues - trying to send to Graylog Logstash	2	1109	August 27, 2019
Automatic XML parsing, how to avoid array creation Logstash	4	883	April 17, 2018
Unable to parse out XML fields Logstash	3	1020	August 22, 2017
Parsing XML File -> xpath does not parse all fields in "event_data" Logstash	4	662	April 8, 2020
Help in parsing XML data in logstash in different events Logstash	2	595	August 31, 2017

Logstash XML parsing issues - trying to send to Graylog, part 2

Related topics