Skip to content

This splunk app includes a custom search command to format XML based events

License

Notifications You must be signed in to change notification settings

dglauche/TA-xmlformatter

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

TA-xmlformatter

Description

This app provides a custom streaming command to format XML based events/fields.

How to use

By default the search command uses the raw field for input & output

[your search] | xmlformat 

But you can specify them if you like:

[your search] | xmlformat infield=my_unformatted_xml_blob_field outfield=some_field_humans_can_read 

pre post

About

This splunk app includes a custom search command to format XML based events

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages