Hi,
i am trying to ingest XML files and split the elements in fields, my log files are;
175696022 0 4049 175696024 0 4049
and
from other questions my props.conf and transform.conf are below
props.conf
[pms]
TIME_PREFIX=EventTime
TIME_FORMAT=%Y-%m-%dT%H:%M:%S
SHOULD_LINEMERGE=false
TRUNCATE=100000
LINE_BREAKER=\>\s*(?=\)
REPORT-xmlext=xml-extr
and
transforms.conf
[xml-extr]
REGEX=<([^\s\>]*)[^\>]*\>([^<]*)\<\/\1\>
FORMAT=$1::$2
MV_ADD=true
REPEAT_MATCH=true
however the only files being ingested are the second one and this is giving fields where there is an =
i have tried to use KV_MODE=xml but this has not helped.
i have used regex101 to validate the regex
Match 1
Full match 451-479 175696022
Group 1. 452-459 availId
Group 2. 460-469 175696022
Match 2
Full match 479-497 0
Group 1. 480-486 reason
Group 2. 487-488 0
Match 3
Full match 497-526 4049
Group 1. 498-508 ServiceKey
Group 2. 509-513 4049
does any body have any advice?
↧