In reference to my other post
https://answers.splunk.com/answers/337397/how-to-break-xml-in-search-time.html
I am adding other way of the question.
I have total xml data in a field like below.
GREAT SOUTHERN WOOD PRESERVING INC 1100 HIGHWAY 431 NORTH ABBEVILLE AL REMBRANDT FOODS- ABBEVILLE 496 INDUSTRIAL PARK RD ABBEVILLE AL 36310 RITE AID #7092 514 KIRKLAND STREET ABBEVILLE AL 36310-2700 31.56149
I need to break the entire field into multiple rows. like below.
----------------------------------------------------------------------------------------
GREAT SOUTHERN WOOD PRESERVING INC 1100 HIGHWAY 431 NORTH ABBEVILLE AL
----------------------------------------------------------------------------------------REMBRANDT FOODS- ABBEVILLE 496 INDUSTRIAL PARK RD ABBEVILLE AL 36310
----------------------------------------------------------------------------------------RITE AID #7092 514 KIRKLAND STREET ABBEVILLE AL 36310-2700 31.56149
Please let me know how could i do it. I tried rex, but i do not think that can give multiple rows out of one.
↧