https://community.splunk.com/t5/Getting-Data-In/xpath-with-splunk/m-p/12556#M952 <P>Phython lib is located <A href="http://lxml.de/">http://lxml.de/</A></P> Tue, 15 Jan 2013 20:45:54 GMT hvandenb 2013-01-15T20:45:54Z https://community.splunk.com/t5/Getting-Data-In/xpath-with-splunk/m-p/12553#M949 <P>How compliant is the xpath command with the real xpath? Is there a specific xpath library used?</P> Thu, 29 Apr 2010 07:37:39 GMT https://community.splunk.com/t5/Getting-Data-In/xpath-with-splunk/m-p/12553#M949 bfaber 2010-04-29T07:37:39Z https://community.splunk.com/t5/Getting-Data-In/xpath-with-splunk/m-p/12554#M950 <P>The Splunk <CODE>xpath</CODE> search command uses the Python <CODE>lxml</CODE> library <A href="http://codespeak.net/lxml/" rel="nofollow">http://codespeak.net/lxml/</A> that is packaged and shipped with the Splunk Python installation. According to its own FAQ <A href="http://codespeak.net/lxml/FAQ.html#what-standards-does-lxml-implement" rel="nofollow">http://codespeak.net/lxml/FAQ.html#what-standards-does-lxml-implement</A> it uses Gnome <CODE>libxml2</CODE> and <CODE>libxslt</CODE>. I believe these are considered among the most standards-compliant implementations available.</P> <P>The search command itself is a relatively simple wrapper script that is in <CODE>$SPLUNK_HOME/etc/apps/search/bin/xpath.py</CODE>. It is possible to replace or add a different parser by writing a similar script around it. See: <A href="http://www.splunk.com/base/Documentation/latest/SearchReference/Aboutcustomsearchcommands" rel="nofollow">http://www.splunk.com/base/Documentation/latest/SearchReference/Aboutcustomsearchcommands</A></P> Thu, 29 Apr 2010 09:40:27 GMT https://community.splunk.com/t5/Getting-Data-In/xpath-with-splunk/m-p/12554#M950 gkanapathy 2010-04-29T09:40:27Z https://community.splunk.com/t5/Getting-Data-In/xpath-with-splunk/m-p/12555#M951 <P>Wow, great answer!</P> Thu, 29 Apr 2010 09:48:32 GMT https://community.splunk.com/t5/Getting-Data-In/xpath-with-splunk/m-p/12555#M951 Justin_Grant 2010-04-29T09:48:32Z https://community.splunk.com/t5/Getting-Data-In/xpath-with-splunk/m-p/12556#M952 <P>Phython lib is located <A href="http://lxml.de/">http://lxml.de/</A></P> Tue, 15 Jan 2013 20:45:54 GMT https://community.splunk.com/t5/Getting-Data-In/xpath-with-splunk/m-p/12556#M952 hvandenb 2013-01-15T20:45:54Z