topic Re: Formatting output of XML in Splunk Search

Formatting output of XML

spicynuggs — Sun, 11 Oct 2020 06:24:09 GMT

Hi, can I check how can I output this row in a proper format?
E.g.
<LogonTriggers>
<Enabled>
..........
</Enabled>
</LogonTriggers>

My file source type is csv format if that is of any help.

| rex "(?ms)\<Triggers\>(?<Triggers>.*?)\</Triggers\>"
| table Triggers

Re: Formatting output of XML

ITWhisperer — Sun, 11 Oct 2020 09:36:55 GMT

Chrome has a splunk XML formatter you could try

Re: Formatting output of XML

niketn — Sun, 11 Oct 2020 09:58:22 GMT

@spicynuggs try one of following answer of mine: https://community.splunk.com/t5/Dashboards-Visualizations/XML-to-display-in-a-proper-format-with-tag/m-p/464895