Splunk Search

Is Splunk preferable for XML data?



I was working with Splunk and XML data from past 1 month, and found that Splunk is not very friendly with XML as compared to logs.
Can anyone help me out that is it really a good suggestion to use Splunk with XML data source.

Thanks in advance!

Tags (1)
0 Karma


You can also use the xmlkv command to extract the fields from xml.


0 Karma

Esteemed Legend


I have used xpath and spath, I wans able to generate some of the reports but it looks like Splunk is actually not meant for structured xml data.

0 Karma
Get Updates on the Splunk Community!

Get ready to show some Splunk Certification swagger at .conf24!

Dive into the deep end of data by earning a Splunk Certification at .conf24. We're enticing you again this ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Now On-Demand Join us to learn more about how you can leverage Service Level Objectives (SLOs) and the new ...

Database Performance Sidebar Panel Now on APM Database Query Performance & Service ...

We’ve streamlined the troubleshooting experience for database-related service issues by adding a database ...