Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to Flatten nested XML attribute data

$
0
0
We have data coming in XML in the following format: Sample Event 1: Sample Event 2: Please note that the data is coming exclusively in XML attributes, and not in elements. We need to flatten out the data using SPL. We have tried multiple combinations of spath and mvexpand. However, since data is in attribute tags, we are not split it into separate rows to show it in a table form when it is of the form given the in the second XML event. I am not sure we can handle this using a regex since, apart from a few, the attributes are not uniform throughout. Can someone please help? Thanks in advance. Regards, Anirban.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>