Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Need help to parse & flatten XML Attribute data in nested format.

$
0
0
We have data coming in XML in the following format: Sample Event 1: Sample Event 2: Please note that the data is exclusively in XML **attributes**, and not in elements. I am aware that we can possibly do it via Python pre-processing, but for now we need to flatten out the data using SPL. We have tried multiple combinations of **spath** and **mvexpand**. However, since data is in attribute tags, we cannot split it into separate rows to show in a table form, when it is of the form given in the second XML event. I am not sure we can handle this using a **regex** since, apart from a few, the attributes are not uniform throughout. Can someone please help? Thanks in advance. Regards, Anirban.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>