Index and Analyze xml

Graylog Central (peer support)
1

Hi to all,

i’ve to indexing xml file with graylog, i’ve already added xml to graylog and i’ve already created a stream and a pipeline with extractor. My problem is that doesn’t exists a plugin for making a xpath query for extraction of attributes or childs and for adding the informations to index.
I wish thre is a method for indexing data from xml like flatten fields and make analysis and query on indexed data. Someone an suggest me a solution?

Thanks

2

You could create a feature request for that at https://github.com/Graylog2/graylog2-server/issues (although it’s unlikely to be implemented anytime soon if at all) or start writing your own plugin which contributes a function for the processing pipelines to process XML data.

See https://www.graylog.org/blog/71-writing-your-own-graylog-processing-pipeline-functions for a blog post about writing your own pipeline functions.

If you’re a Graylog Enterprise customer, we can also talk about sponsoring the development of such functions for you: https://www.graylog.org/enterprise

3

thanks for suggestions, i’ve open a new issue into github project page.

4

I wrote a plugin for extracting a simple XML field in a processing pipeline (the XML tagmatcher plugin). It can be found in the marketplace. But it does not support more complex structures, and I am not planning on extending it.

5

Yes, i know it but i have to treat more complex structures and attributes.

Thanks

6

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.