Parse xml content to elasticsearch

I have a XML documents to be indexed

<metadata
<meta content="Our Projects" name="Section"/
<meta content="Completed Projects" name="Categorie"/
</metadata

And I want to index the content

Have you looked at Logstash?

Yes I tried logstash but still don't work .

input{
stdin{}
}
filter{
xml{
source=> "message"
output{
elasticsearch {
host => "elasticsearch"
protocol=> http
cluster => elasticsearch
port => 9220
index=> "service_index"
}
}
And I had this result

you need to pass well formed xml to multiline and wrap into a single event in a field, e.g.message then pass that to the xml filter, see this Parsing multiline logs : line + xml

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.