Displaying XML in Results

chintanmistry — Sun, 07 Dec 2014 15:23:00 GMT

Hello,
How can I format the Splunk search results to show XML in formatted manner and not look like a raw data?
Currently, it displays like this:

<ArrayOfError xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xmlns:xsd=\"http://www.w3.org/2001/XMLSchema\">  <Error>    <ErrorCode>600006</ErrorCode>    <ErrorMessage>Current Status of Item Does Not Permit Updates</ErrorMessage>    <ErrorSource>Web Service</ErrorSource>  </Error></ArrayOfError>

I want to display it like below which is more readable:

<ArrayOfError xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
   <Error>
      <ErrorCode>600006</ErrorCode>
      <ErrorMessage>Current Status of Item Does Not Permit Updates</ErrorMessage>
      <ErrorSource>Web Service</ErrorSource>
   </Error>
</ArrayOfError>

Re: Displaying XML in Results

vasanthmss — Mon, 08 Dec 2014 23:25:27 GMT

Check this answer,

http://answers.splunk.com/answers/88638/xml-viewer-for-splunk-pretty-xml.html

topic Re: Displaying XML in Results in Dashboards & Visualizations

Displaying XML in Results

Re: Displaying XML in Results