Xml filter: Unable to get parent and child attributes in one row

Elastic Stack Logstash
7

Maybe. If you really got to know XPath.

It seems to me that you want separate events for each test-case but with the @name of test-suite carried into each test-case event.

I think this can be done. It would involve two xml filter stages with a split filter in between.
Use this online XPath tester

  1. 1st xml filter, add two fields
    "//test-case/../../@name", "suitename",
    "//test-case", "test-cases"
  2. Split filter, split on test-cases
    field => "test-cases"
    target => "test-case"
    this should create X number of new events all with suitename and test-case with xml content`.
  3. 2nd xml filter, add the other fields.
    "/test-case/@name", "testcase",
    "/test-case/@result", "res",
    "/test-case/reason/@name","reasonattr",
    "/test-case/@time", "timetest"
    Remember to drop any fields you no longer need.
    Now elasticsearch and kibana have a single doc structure of test case to work with.

Good Luck.