Dashboards & Visualizations

How to pull a complete xml from event.

harish_ka
Communicator

i need to pull complete xml from the event. i tried spath and xpath to pull particular key pair value, but i want the complete xml from the event. i tried rex but its not working. xml looks as below:
i need to pull the complete xml alt text

Tags (1)
0 Karma

juvetm
Communicator

hi harish_ka
can you try this commad
xmlkv commad
i think this may help
thanks

0 Karma

juvetm
Communicator

hi harish_ka
can you do some thing like this

 sourcetype="access_c*" | xmlkv | table TransactionId
0 Karma

harish_ka
Communicator

Thank Juvetm for your answer. But it didnt work for me 😞

0 Karma

harish_ka
Communicator

it will be really helpful if you Can give an example of xmlkv usage.
i tried search.....|xmlkv
but dont know how to get the values as output...

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...