https://community.splunk.com/t5/Dashboards-Visualizations/XPath-Two-Levels-of-Attributes/m-p/78004#M4219 <P>With this XML:</P> <PRE><CODE>&lt;serverVariables&gt; &lt;item name="GATEWAY_INTERFACE"&gt; &lt;value string="CGI/1.1" /&gt; &lt;/item&gt; &lt;item name="HTTPS"&gt; &lt;value string="off" /&gt; &lt;/item&gt; </CODE></PRE> <P>How can I use the XPATH command to get key value pairs like:</P> <PRE><CODE>GATEWAY_INTERFACE:CGI/1.1 HTTPS:off </CODE></PRE> Fri, 08 Apr 2011 19:36:07 GMT Kyle_Brandt 2011-04-08T19:36:07Z https://community.splunk.com/t5/Dashboards-Visualizations/XPath-Two-Levels-of-Attributes/m-p/78004#M4219 <P>With this XML:</P> <PRE><CODE>&lt;serverVariables&gt; &lt;item name="GATEWAY_INTERFACE"&gt; &lt;value string="CGI/1.1" /&gt; &lt;/item&gt; &lt;item name="HTTPS"&gt; &lt;value string="off" /&gt; &lt;/item&gt; </CODE></PRE> <P>How can I use the XPATH command to get key value pairs like:</P> <PRE><CODE>GATEWAY_INTERFACE:CGI/1.1 HTTPS:off </CODE></PRE> Fri, 08 Apr 2011 19:36:07 GMT https://community.splunk.com/t5/Dashboards-Visualizations/XPath-Two-Levels-of-Attributes/m-p/78004#M4219 Kyle_Brandt 2011-04-08T19:36:07Z https://community.splunk.com/t5/Dashboards-Visualizations/XPath-Two-Levels-of-Attributes/m-p/78005#M4220 <P>Figured it out for at least a specific field:</P> <PRE><CODE>xpath "//item/[@name='HTTPS']/value/@string" outfield=LOATH_XML </CODE></PRE> Fri, 08 Apr 2011 20:05:21 GMT https://community.splunk.com/t5/Dashboards-Visualizations/XPath-Two-Levels-of-Attributes/m-p/78005#M4220 Kyle_Brandt 2011-04-08T20:05:21Z