topic Re: Is Splunk preferable for XML data? in Splunk Search https://community.splunk.com/t5/Splunk-Search/Is-Splunk-preferable-for-XML-data/m-p/111127#M183621 <P>You need the <CODE>xpath</CODE> command!</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/6.2.3/SearchReference/Xpath">http://docs.splunk.com/Documentation/Splunk/6.2.3/SearchReference/Xpath</A></P> Thu, 09 Jul 2015 12:22:32 GMT woodcock 2015-07-09T12:22:32Z Is Splunk preferable for XML data? https://community.splunk.com/t5/Splunk-Search/Is-Splunk-preferable-for-XML-data/m-p/111126#M183620 <P>Hi,</P> <P>I was working with Splunk and XML data from past 1 month, and found that Splunk is not very friendly with XML as compared to logs.<BR /> Can anyone help me out that is it really a good suggestion to use Splunk with XML data source.</P> <P>Thanks in advance!</P> Thu, 09 Jul 2015 10:13:11 GMT https://community.splunk.com/t5/Splunk-Search/Is-Splunk-preferable-for-XML-data/m-p/111126#M183620 justgovind30198 2015-07-09T10:13:11Z Re: Is Splunk preferable for XML data? https://community.splunk.com/t5/Splunk-Search/Is-Splunk-preferable-for-XML-data/m-p/111127#M183621 <P>You need the <CODE>xpath</CODE> command!</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/6.2.3/SearchReference/Xpath">http://docs.splunk.com/Documentation/Splunk/6.2.3/SearchReference/Xpath</A></P> Thu, 09 Jul 2015 12:22:32 GMT https://community.splunk.com/t5/Splunk-Search/Is-Splunk-preferable-for-XML-data/m-p/111127#M183621 woodcock 2015-07-09T12:22:32Z Re: Is Splunk preferable for XML data? https://community.splunk.com/t5/Splunk-Search/Is-Splunk-preferable-for-XML-data/m-p/111128#M183622 <P>I have used xpath and spath, I wans able to generate some of the reports but it looks like Splunk is actually not meant for structured xml data.</P> Fri, 10 Jul 2015 09:45:48 GMT https://community.splunk.com/t5/Splunk-Search/Is-Splunk-preferable-for-XML-data/m-p/111128#M183622 justgovind30198 2015-07-10T09:45:48Z Re: Is Splunk preferable for XML data? https://community.splunk.com/t5/Splunk-Search/Is-Splunk-preferable-for-XML-data/m-p/111129#M183623 <P>You can also use the <CODE>xmlkv</CODE> command to extract the fields from xml.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/6.2.4/SearchReference/Xmlkv">http://docs.splunk.com/Documentation/Splunk/6.2.4/SearchReference/Xmlkv</A></P> Fri, 10 Jul 2015 11:27:21 GMT https://community.splunk.com/t5/Splunk-Search/Is-Splunk-preferable-for-XML-data/m-p/111129#M183623 jimodonald 2015-07-10T11:27:21Z