xmlkv
xmlkv
Synopsis
Extracts xml key-value pairs.
Syntax
xmlkv maxinputs=<int>
Required arguments
- maxinputs
- Syntax: maxinputs=<int>
- Description:
Description
Finds key value pairs of the form <foo>bar</foo> where foo is the key and bar is the value from the _raw key.
Examples
Example 1: Extract field/value pairs from XML formatted data. "xmlkv" automatically extracts values between XML tags.
... | xmlkvExample 2: Example usage
... | xmlkv maxinputs=10000See also
extract, kvform, multikv, rex, xpath
Answers
Have questions? Visit Splunk Answers and see what questions and answers the Splunk community has using the xmlkv command.
This documentation applies to the following versions of Splunk: 4.1 , 4.1.1 , 4.1.2 , 4.1.3 , 4.1.4 , 4.1.5 , 4.1.6 , 4.1.7 , 4.1.8 , 4.2 , 4.2.1 , 4.2.2 , 4.2.3 , 4.2.4 , 4.2.5 , 4.3 , 4.3.1 , 4.3.2 , 4.3.3 , 4.3.4 , 4.3.5 , 4.3.6 , 5.0 , 5.0.1 , 5.0.2 View the Article History for its revisions.