I have a XML documents to be indexed
<metadata
<meta content="Our Projects" name="Section"/
<meta content="Completed Projects" name="Categorie"/
</metadata
And I want to index the content
Have you looked at Logstash?
Yes I tried logstash but still don't work .
input{
stdin{}
}
filter{
xml{
source=> "message"
output{
elasticsearch {
host => "elasticsearch"
protocol=> http
cluster => elasticsearch
port => 9220
index=> "service_index"
}
}
And I had this result
you need to pass well formed xml to multiline and wrap into a single event in a field, e.g.message then pass that to the xml filter, see this Parsing multiline logs : line + xml
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.