I would like to ask about win log in XML format:
Using Splunk, we collect Windows logs in XML format, because before indexing on Splunk, we modify and reduce them on Cribl - according to this document: Reducing Windows XML Events
It works fine, but now I would like to do one thing - convert values that are expressed in XML using numeric code to expressions in text form, as in the standard Windows log format. For example:
In XML is:
and corresponding value in text format of log is:
So I tried to find conversion tables between text and XML format and for elements
I found some. But I cannot find any for element
Do you know anyone about some? (Or for other XML elements as well)? If so, you can share it with me? It will be really appreciated.