Parsing xml with name value pairs?

Elastic Stack Logstash
1

Can someone please provide an example config file setup to parse a xml file with name value pairs? I have a sample xml input below:

<MOBILE_COMMUNICATION LastSyncTs="2016-09-06T22:54:55.631Z" Type="Incremental_Sync_vod">
 <MOBILE_TRANSACTIONS id="98968721-BD53-4126-A3A7-F5F3B6A2C3BE" type="CRASHLOG">
  <MOBILE_TRANSACTION action="U" id="NONE">
  <OBJECT name="LOG">
    <FIELD name="ORGID" value="data"/>
    <FIELD name="USERNAME" value="data"/>
    <FIELD name="USERID" value="data"/>
    <FIELD name="IREPVERSION" value="27.0.4"/>
    <FIELD name="MEMORYUSAGE" value="N/A"/>
    <FIELD name="IPADVERSION" value="iPad4,1"/>
    <FIELD name="IOSVERSION" value="7.1.2"/>
    <FIELD name="BREADCRUMBS" value=""/>
    <FIELD name="CRASHTIMESTAMP" value="2016-09-07 06:28:29 +0000"/>
    <FIELD name="CRASHHASH" value="f26d551d97106f4d5d0eb306b042a4f0"/>
    <FIELD name="CRASHLOG" value="data"/>
   </OBJECT>
  </MOBILE_TRANSACTION>
 </MOBILE_TRANSACTIONS>
</MOBILE_COMMUNICATION>

Particularly, I need to retrieve all name and value pairs inside FIELD.

2

Have you tried using the xml filter? It won't give you exactly what you want out of the box but it'll be a good starting point.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.