Splunk Dev

xml tags extraction

nerelluk
New Member

Hi All,

In splunk Enterprise is their any way to extract the XML tags not the xml fields .

ie .for example PFB xml

i want to extract that yellow shaded thing .Could any one please help me in this.

Thanks
Nerellu

Tags (1)
0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

@nerelluk

You can use xpath if you want to extract in search.

https://docs.splunk.com/Documentation/Splunk/7.2.3/SearchReference/Xpath

Or you can use props.conf and transforms.conf also. Check below link.

https://answers.splunk.com/answers/133533/xml-extraction.html?utm_source=typeahead&utm_medium=newque...

Can you please share your sample XML data and exactly what data you required in table ???

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...