Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to extract from a value from XML and include it in the search?

$
0
0
Hi, I would like to extract the XML field value from an XML string from the log and include it in the search. What is the best way to do that? Currently, whenever a request is posted, I am searching with the id, but I want to create a dynamic search such that whenever a new employee is added, I can see it in the Splunk search. I tried the field extractor regex `(^(?:[^>\n]*>){4}(?P\w+))`, but not sure how I can use this regex in the search box. Sample XML: TEST001

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>