Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

how to apply xmlkv for result of other query

$
0
0
Hi, I have huge xml and i have written a query to break the xml. Let me explain with small example ( though i am doing this on a bigger file, i am showing this for understanding) My main xml: {data..}{data..}{data..}{data..}{data..} I have written query to get the xml nodes. Now the results will be like this. My query is like this: index = "" | xmlkv | spath output=node path= | mvexpand node |table node After that, results would look like below. {data..}{data..}{data..}{data..}{data..} Now, How can i apply xmlkv to get the data out of the results above.? i do not want to apply it on actual xml, as it is huge and do not need all the data. Thank You, Regards, Srini.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>