# Xml processing
**URL:** https://discuss.elastic.co/t/xml-processing/129533
**Category:** Logstash
**Created:** [April 25, 2018, 4:02pm UTC](https://discuss.elastic.co/t/xml-processing/129533 "2018-04-25T16:02:35Z")
**Posts on this page:** 10
**Page:** 1
### Author:  [@sandeepnarla22322](https://discuss.elastic.co/u/sandeepnarla22322)
#### Post date: [April 25, 2018, 4:02pm UTC](https://discuss.elastic.co/t/xml-processing/129533/1 "2018-04-25T16:02:36Z")
\ 1794480 20180425195021 SES 10.174.79.158 2018-04-25 07:20:24.741642168 Wed, 25 Apr 2018 14:20:24 GMT 10.174.79.158 Apache-HttpClient/4.1.1 (java 1.5) VG1 10.174.131.158 2018-04-25 07:20:24 1794481 SES 10.174.79.158 2018-04-25 07:20:24.741642168 198.24.6.220 3758 200 Apache-HttpClient/4.1.1 (java 1.5) 2018-04-25 07:20:24.802608803 2018-04-25 07:20:24.861197008 VG1 10.174.131.158 2018-04-25 07:20:24 1 registeredDevices R2VuZXJpY19DUjEzMFBhcnQyXzIwMTgwNDI1XzE5NDkxNA== 1004 ownerIdtoIMSIandMSISDNmappingCfg.json is not configured. digits 1794482 20180425195021 SES 10.174.79.158 2018-04-25 07:20:24.741642168 Wed, 25 Apr 2018 14:20:24 GMT 10.174.79.158 Apache-HttpClient/4.1.1 (java 1.5) VG1 10.174.131.158 2018-04-25 07:20:24
Hello ALl,
I want to filter data between I have multiple occurences of in a given file
I have tried using xpath and mapping each and indiviudal file
mapping individual fields
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [April 25, 2018, 4:26pm UTC](https://discuss.elastic.co/t/xml-processing/129533/2 "2018-04-25T16:26:21Z")
Did you actually read what you posted? Unless you format the XML as preformatted text (use Markdown or the `` toolbar button) the tags will be stripped.
---
### Author:  [@sandeepnarla22322](https://discuss.elastic.co/u/sandeepnarla22322)
#### Post date: [April 25, 2018, 5:53pm UTC](https://discuss.elastic.co/t/xml-processing/129533/3 "2018-04-25T17:53:14Z")
179448020180425195021SES10.174.79.158 2018-04-25 07:20:24.741642168Wed, 25 Apr 2018 14:20:24 GMT10.174.79.158Apache-HttpClient/4.1.1 (java 1.5)VG110.174.131.1582018-04-25 07:20:241794481SES10.174.79.158 2018-04-25 07:20:24.741642168198.24.6.2203758200Apache-HttpClient/4.1.1 (java 1.5)2018-04-25 07:20:24.8026088032018-04-25 07:20:24.861197008VG110.174.131.1582018-04-25 07:20:241registeredDevicesR2VuZXJpY19DUjEzMFBhcnQyXzIwMTgwNDI1XzE5NDkxNA==1004ownerIdtoIMSIandMSISDNmappingCfg.json is not configured.digits179448220180425195021SES10.174.79.158 2018-04-25 07:20:24.741642168Wed, 25 Apr 2018 14:20:24 GMT10.174.79.158Apache-HttpClient/4.1.1 (java 1.5)VG110.174.131.1582018-04-25 07:20:24
Thanks for getting back to me this the xml file I have, my bad I have posted wrong data earlier
if I want to extract data between trafficeventData tags is there a easier way to do
I am used to processing csv files, this is the first time i am trying to process xml file
I have a requirement to retain all the fields between these tags
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [April 25, 2018, 6:29pm UTC](https://discuss.elastic.co/t/xml-processing/129533/4 "2018-04-25T18:29:08Z")
Seriously, read what you're posting or use the preview pane. What you posted isn't shown XML and unless you fix this it's impossible to help.
---
### Author:  [@sandeepnarla22322](https://discuss.elastic.co/u/sandeepnarla22322)
#### Post date: [April 25, 2018, 7:56pm UTC](https://discuss.elastic.co/t/xml-processing/129533/5 "2018-04-25T19:56:00Z")
```
*
*
*
* 1794480
* 20180425195021
* SES
* 10.174.79.158 2018-04-25 07:20:24.741642168
* Wed, 25 Apr 2018 14:20:24 GMT
* 10.174.79.158
* Apache-HttpClient/4.1.1 (java 1.5)
* VG1
* 10.174.131.158
* 2018-04-25 07:20:24
*
*
* 1794481
* SES
* 10.174.79.158 2018-04-25 07:20:24.741642168
* 198.24.6.220
* 3758
* 200
* Apache-HttpClient/4.1.1 (java 1.5)
* 2018-04-25 07:20:24.802608803
* 2018-04-25 07:20:24.861197008
* VG1
* 10.174.131.158
* 2018-04-25 07:20:24
*
*
* 1
* registeredDevices
* R2VuZXJpY19DUjEzMFBhcnQyXzIwMTgwNDI1XzE5NDkxNA==
* 1004
* ownerIdtoIMSIandMSISDNmappingCfg.json is not configured.
* digits
*
*
*
*
* 1794482
* 20180425195021
* SES
* 10.174.79.158 2018-04-25 07:20:24.741642168
* Wed, 25 Apr 2018 14:20:24 GMT
* 10.174.79.158
* Apache-HttpClient/4.1.1 (java 1.5)
* VG1
* 10.174.131.158
* 2018-04-25 07:20:24
*
*
```
sorry for the inconvenience i was not paying attention to the preview this the xml data
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [April 25, 2018, 8:45pm UTC](https://discuss.elastic.co/t/xml-processing/129533/6 "2018-04-25T20:45:06Z")
Can't you just use the xml filter with the default `store_xml` option? Then you'll basically convert the XML data to a JSON representation and thus retain all data.
---
### Author:  [@sandeepnarla22322](https://discuss.elastic.co/u/sandeepnarla22322)
#### Post date: [April 26, 2018, 4:09pm UTC](https://discuss.elastic.co/t/xml-processing/129533/7 "2018-04-26T16:09:01Z")
thanks Magnus
---
### Author:  [@sandeepnarla22322](https://discuss.elastic.co/u/sandeepnarla22322)
#### Post date: [April 26, 2018, 4:30pm UTC](https://discuss.elastic.co/t/xml-processing/129533/8 "2018-04-26T16:30:00Z")
Hello Magnus,
Thanks a to one small help, I want to extract a nodename(TNTMO071.) from the following input path
TNTMO071.2018-04-26\_07%3A00.log
I have tried the following pattern and cannot see it in Kibana even though there is no error while running logstash
the following is the input and filter
file {
path =\>"/opt/LogStashOutputFormatted/TMOES/\*.log"
start\_position =\> "beginning"
sincedb\_path =\> "/dev/null"
type =\> "tmoes"
}
grok {
match =\> ["path", "/%{WORD:nodeName}.log$"]
}
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [April 26, 2018, 8:00pm UTC](https://discuss.elastic.co/t/xml-processing/129533/9 "2018-04-26T20:00:34Z")
So what **do** you see in Kibana? Copy/paste from the JSON tab so we can see an example document.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 24, 2018, 8:02pm UTC](https://discuss.elastic.co/t/xml-processing/129533/10 "2018-05-24T20:02:55Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.