Getting Data In

XML parsing with condition

indianhans
Engager

Hi

I am novice to splunk and need help in writing a splunk query in order to find Order ID (ORD********)


Sample XML


0 Karma

martin_mueller
SplunkTrust
SplunkTrust

I can't see your sample data.

0 Karma

fdi01
Motivator

run in bar search the following search:
index=your_index_name

or
index=your_index_name source=your_source_name sourcetype=your_sourcetype_name

index=your_index_name source=your_source_name sourcetype=your_sourcetype_name|....your_condictions_search
exple:
index=you_index host=you_host "Error" | chart count sparkline(count, 1h) as trend by host | sort -count

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Is this even related to the question?

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.