parse_xml()

Learn how to use the parse_xml() function to return a dynamic object that is determined by the value of XML.

Interprets a string as an XML value, converts the value to a JSON, and returns the value as dynamic.

Syntax

parse_xml(xml)

Parameters

NameTypeRequiredDescription
xmlstring✔️The XML-formatted string value to parse.

Returns

An object of type dynamic that is determined by the value of xml, or null, if the XML format is invalid.

The conversion is done as follows:

XMLJSONAccess
<e/>{ “e”: null }o.e
<e>text</e>{ “e”: “text” }o.e
<e name="value" />{ “e”:{"@name": “value”} }o.e["@name"]
<e name="value">text</e>{ “e”: { “@name”: “value”, “#text”: “text” } }o.e["@name"] o.e["#text"]
<e> <a>text</a> <b>text</b> </e>{ “e”: { “a”: “text”, “b”: “text” } }o.e.a o.e.b
<e> <a>text</a> <a>text</a> </e>{ “e”: { “a”: [“text”, “text”] } }o.e.a[0] o.e.a[1]
<e> text <a>text</a> </e>{ “e”: { “#text”: “text”, “a”: “text” } }1`o.e["#text"] o.e.a

Example

In the following example, when context_custom_metrics is a string that looks like this:

<?xml version="1.0" encoding="UTF-8"?>
<duration>
    <value>118.0</value>
    <count>5.0</count>
    <min>100.0</min>
    <max>150.0</max>
    <stdDev>0.0</stdDev>
    <sampledValue>118.0</sampledValue>
    <sum>118.0</sum>
</duration>

then the following CSL Fragment translates the XML to the following JSON:

{
    "duration": {
        "value": 118.0,
        "count": 5.0,
        "min": 100.0,
        "max": 150.0,
        "stdDev": 0.0,
        "sampledValue": 118.0,
        "sum": 118.0
    }
}

and retrieves the value of the duration slot in the object, and from that it retrieves two slots, duration.value and duration.min (118.0 and 100.0, respectively).

T
| extend d=parse_xml(context_custom_metrics) 
| extend duration_value=d.duration.value, duration_min=d["duration"]["min"]