如何解决努力使用Logstash解析XML
我有很多日志,每个日志存储在以下xml文件中:
我想要实现的目标:
- 在elasticsearch中创建存储以下内容的字段:
MainActivityText =“测试”
我的配置文件:
input {
file {
path => "/path/*.xml"
start_position => "beginning"
type => "xml"
sincedb_path => "/dev/null"
codec => multiline {
pattern => "<Remarks"
charset => "ISO8859-8"
what => "previous"
negate => "true"
}
}
}
filter {
xml {
source => "message"
store_xml => false
force_array => false
target => "Remarks"
xpath => [
"/Remarks/MainActivity/text()","MainActivityText"
]
}
}
output {
file
{
path => "/path/output.txt"
}
elasticsearch
{
hosts => ["https://elastic:9200"]
user => "elastic"
password => ""
ssl => true
ssl_certificate_verification => true
cacert => "/path/sub_ca.crt"
index => "test-%{+YYYY.MM}"
}
}
但是输出不是我期望得到的。我只是将整个xml存储在索引中。
版权声明:本文内容由互联网用户自发贡献,该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容, 请发送邮件至 dio@foxmail.com 举报,一经查实,本站将立刻删除。