i need to pull complete xml from the event. i tried spath and xpath to pull particular key pair value, but i want the complete xml from the event. i tried rex but its not working. xml looks as below:
i need to pull the complete xml
hi harish_ka
can you try this commad
xmlkv commad
i think this may help
thanks
hi harish_ka
can you do some thing like this
sourcetype="access_c*" | xmlkv | table TransactionId
Thank Juvetm for your answer. But it didnt work for me 😞
it will be really helpful if you Can give an example of xmlkv usage.
i tried search.....|xmlkv
but dont know how to get the values as output...