Dashboards & Visualizations

Displaying XML in Results

chintanmistry
New Member

Hello,
How can I format the Splunk search results to show XML in formatted manner and not look like a raw data?
Currently, it displays like this:

<ArrayOfError xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xmlns:xsd=\"http://www.w3.org/2001/XMLSchema\">  <Error>    <ErrorCode>600006</ErrorCode>    <ErrorMessage>Current Status of Item Does Not Permit Updates</ErrorMessage>    <ErrorSource>Web Service</ErrorSource>  </Error></ArrayOfError>

I want to display it like below which is more readable:

<ArrayOfError xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
   <Error>
      <ErrorCode>600006</ErrorCode>
      <ErrorMessage>Current Status of Item Does Not Permit Updates</ErrorMessage>
      <ErrorSource>Web Service</ErrorSource>
   </Error>
</ArrayOfError>
Tags (3)
0 Karma

vasanthmss
Motivator
0 Karma
Get Updates on the Splunk Community!

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...

Splunk App Developers | .conf25 Recap & What’s Next

If you stopped by the Builder Bar at .conf25 this year, thank you! The retro tech beer garden vibes were ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...