XML ingestion splits object and reads one object as two separate objects creating errors

Elastic Stack Logstash
1

Trying to ingest an xml with a format like;

<rule>
<name></name>
<description></description>
<options>
<key></key>
<value></value>
<key></key>
<value></value>
<key></key>
<value></value>
......(same as above>)
</options>
</rule> 
<rule>
<name></name>
<description></description>
<options>
<key></key>
<value></value>
<key></key>
<value></value>
<key></key>
<value></value>
......(same as above>)
</options>
</rule>

And so on.....

However, it only stores the xml properly for a few and has trouble splitting on others. It will separate for some rules at

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.