Solved: Extracting Tag names into fields from XML - Splunk Community

Dashboards & Visualizations

Hi I am new to Splunk, can anyone help me with extracting a particular XML Tag name.

Like

ns:OrderReference
urn1:BuyersID1234/urn1:BuyersID
urn1:SellersID1-1216/urn1:SellersID
/ns:OrderReference

I need to extract the tag with xpath OrderReference/BuyersID into a filed value.So how can i do that

1 Solution

Solution

xpath should do exactly what you want.

Info on xpath in the docs: http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Xpath

View solution in original post

Solution

xpath should do exactly what you want.

Info on xpath in the docs: http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Xpath

Get Updates on the Splunk Community!

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Between hands-on technical sessions, keynote reveals, and diving into live architectures, .conf26 is packed ...

Join the Hackathon at .conf26 and build a No-Code AI agent

Join us for the AI Agent Buildathon, an in-person, three-hour hands-on Hackathon where you’ll use Splunk Agent ...