<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: 3GPP TS 32.435 XML format parsing in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/3GPP-TS-32-435-XML-format-parsing/m-p/381263#M68768</link>
    <description>&lt;P&gt;Hi,&lt;BR /&gt;
we got around this by converting the XML files using xsltproc with a custom stylesheet into a key-value pair file. This conversion is done on an intermediate node.&lt;/P&gt;

&lt;P&gt;Regards,&lt;BR /&gt;
Mike&lt;/P&gt;</description>
    <pubDate>Mon, 09 Sep 2019 19:55:51 GMT</pubDate>
    <dc:creator>mikaellindstrom</dc:creator>
    <dc:date>2019-09-09T19:55:51Z</dc:date>
    <item>
      <title>3GPP TS 32.435 XML format parsing</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/3GPP-TS-32-435-XML-format-parsing/m-p/381262#M68767</link>
      <description>&lt;P&gt;Hi,&lt;BR /&gt;
Has anyone been able to parse XML files in 3GPP 32.435 format? It's an XML formatted file with performance measurements.&lt;BR /&gt;
In the sample below, the node that generates this file has connections to extNode1-4 and generates statistics for 2 types of counters (countername1 (p=1), countername2 (p=2)) for each of the external nodes.  - so in this file, a total of 8 measurement points, 2 for each external nodes.&lt;BR /&gt;
I'm a little unsure of how to best parse this in Splunk.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;    &amp;lt;fileHeader fileFormatVersion="32.435 V10.0" vendorName="XXXX"&amp;gt;
            &amp;lt;fileSender localDn="ManagedElement=Node" elementType="YYYY"/&amp;gt;
            &amp;lt;measCollec beginTime="2019-06-17T17:45:00-07:00"/&amp;gt;
    &amp;lt;/fileHeader&amp;gt;
    &amp;lt;measData&amp;gt;
            &amp;lt;managedElement localDn="ManagedElement=Node" swVersion="XXXYYYZZZZ"/&amp;gt;
            &amp;lt;measInfo measInfoId="DscRemotePeer"&amp;gt;
                    &amp;lt;job jobId="Blade_test"/&amp;gt;
                    &amp;lt;granPeriod duration="PT900S" endTime="2019-06-17T18:00:00-07:00"/&amp;gt;
                    &amp;lt;repPeriod duration="PT900S"/&amp;gt;
                    &amp;lt;measType p="1"&amp;gt;countername1&amp;lt;/measType&amp;gt;
                    &amp;lt;measType p="2"&amp;gt;countername2&amp;lt;/measType&amp;gt;
                    &amp;lt;measValue measObjLdn="DscFunction=1,DscNodes=1,DscNode=Node,DscAdjacentRealms=1,DscAdjacentRealm=extNode1.domain.com,DscRemotePeers=1,DscRemotePeer=extNode1"&amp;gt;
                            &amp;lt;r p="1"&amp;gt;0&amp;lt;/r&amp;gt;
                            &amp;lt;r p="2"&amp;gt;0&amp;lt;/r&amp;gt;
                    &amp;lt;/measValue&amp;gt;
                    &amp;lt;measValue measObjLdn="DscFunction=1,DscNodes=1,DscNode=Node,DscAdjacentRealms=1,DscAdjacentRealm=extNode2.domain.com,DscRemotePeers=1,DscRemotePeer=extNode2"&amp;gt;
                            &amp;lt;r p="1"&amp;gt;0&amp;lt;/r&amp;gt;
                            &amp;lt;r p="2"&amp;gt;0&amp;lt;/r&amp;gt;
                    &amp;lt;/measValue&amp;gt;
                    &amp;lt;measValue measObjLdn="DscFunction=1,DscNodes=1,DscNode=Node,DscAdjacentRealms=1,DscAdjacentRealm=extNode3.domain.com,DscRemotePeers=1,DscRemotePeer=extNode3"&amp;gt;
                            &amp;lt;r p="1"&amp;gt;0&amp;lt;/r&amp;gt;
                            &amp;lt;r p="2"&amp;gt;0&amp;lt;/r&amp;gt;
                    &amp;lt;/measValue&amp;gt;
                    &amp;lt;measValue measObjLdn="DscFunction=1,DscNodes=1,DscNode=Node,DscAdjacentRealms=1,DscAdjacentRealm=extNode4.domain.com,DscRemotePeers=1,DscRemotePeer=extNode4"&amp;gt;
                            &amp;lt;r p="1"&amp;gt;0&amp;lt;/r&amp;gt;
                            &amp;lt;r p="2"&amp;gt;0&amp;lt;/r&amp;gt;
                    &amp;lt;/measValue&amp;gt;
            &amp;lt;/measInfo&amp;gt;
    &amp;lt;/measData&amp;gt;
    &amp;lt;fileFooter&amp;gt;
            &amp;lt;measCollec endTime="2019-06-17T18:00:00-07:00"/&amp;gt;
    &amp;lt;/fileFooter&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Regards,&lt;BR /&gt;
Mikael Lindstrom&lt;/P&gt;</description>
      <pubDate>Mon, 08 Jul 2019 21:39:51 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/3GPP-TS-32-435-XML-format-parsing/m-p/381262#M68767</guid>
      <dc:creator>mikaellindstrom</dc:creator>
      <dc:date>2019-07-08T21:39:51Z</dc:date>
    </item>
    <item>
      <title>Re: 3GPP TS 32.435 XML format parsing</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/3GPP-TS-32-435-XML-format-parsing/m-p/381263#M68768</link>
      <description>&lt;P&gt;Hi,&lt;BR /&gt;
we got around this by converting the XML files using xsltproc with a custom stylesheet into a key-value pair file. This conversion is done on an intermediate node.&lt;/P&gt;

&lt;P&gt;Regards,&lt;BR /&gt;
Mike&lt;/P&gt;</description>
      <pubDate>Mon, 09 Sep 2019 19:55:51 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/3GPP-TS-32-435-XML-format-parsing/m-p/381263#M68768</guid>
      <dc:creator>mikaellindstrom</dc:creator>
      <dc:date>2019-09-09T19:55:51Z</dc:date>
    </item>
  </channel>
</rss>

