Dashboards & Visualizations

XPath Two Levels of Attributes

Kyle_Brandt
Path Finder

With this XML:

<serverVariables>
<item name="GATEWAY_INTERFACE">
   <value string="CGI/1.1" />
 </item>
 <item name="HTTPS">
   <value string="off" />
 </item>

How can I use the XPATH command to get key value pairs like:

GATEWAY_INTERFACE:CGI/1.1
HTTPS:off
Tags (2)
0 Karma
1 Solution

Kyle_Brandt
Path Finder

Figured it out for at least a specific field:

xpath "//item/[@name='HTTPS']/value/@string" outfield=LOATH_XML

View solution in original post

Kyle_Brandt
Path Finder

Figured it out for at least a specific field:

xpath "//item/[@name='HTTPS']/value/@string" outfield=LOATH_XML
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...