标签： xml splunk
我在下面的 splunk 中有 xml 数据请求和响应
请求 3/11/21 晚上 8:07:36.967 [3/12/21 1:07:36:967 UTC] 00001e46 LogMessageHan 3 soapenv:BodyEWS123DDA345DDA1SxxxNrrr000 回复 [3/11/21 7:13:59:061 UTC] 00001e0d LogMessageHan 3 SOAP-ENV:Body001Failure OLAR500P 错误代码：999 文件已关闭 现在我的要求是获取所有失败并出现错误 OLAR500P 错误代码：999 FILE IS CLOSED where rrr
回复 [3/11/21 7:13:59:061 UTC] 00001e0d LogMessageHan 3 SOAP-ENV:Body001Failure OLAR500P 错误代码：999 文件已关闭
现在我的要求是获取所有失败并出现错误 OLAR500P 错误代码：999 FILE IS CLOSED where rrr