Quering for a value between two strings

Hey All,
Sorry if this has been asked befower, I don´t know how to search for it.
But basically I want to match events based on a value in between two tags:

response: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<TransactionResponse>
    <Result>
        <ResponseCode>1030</ResponseCode>
        <ResponseMessage>Invalid token</ResponseMessage>
        <ResponseTimestamp>15082018170001</ResponseTimestamp>
        <MerchantID>AUP006DM006</MerchantID>

I need to be able to target any events that contains:

<ResponseCode>1030</ResponseCode>

With any number except from 1000.

Any ideas?

Best way would be to parse the data in the document into separate fields before indexing them into Elasticsearch.

I know, but at them moment I don´t have the time to mess with the grok filter and all the testing that requires.
We handle a high volume incoming data, and a change in performance could be catastrophic.
Is there a way to do it in kibana for now?

I can’t think of any way right now.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.