下面是logstash中的xml conf示例：

input {  
file 
{
    path => "/home/Test_xml.xml"
    start_position => "beginning"
     codec => multiline 
    {
        pattern => "^<\?book .*\>"
        negate => true
        what => "previous"
    }
    sincedb_path => "/dev/null"
  }
}

filter 
{
   xml {
    source => "message"
    target => "parsed"
  }
  split {
    field => "[parsed][book]"
    add_field => {
      bookAuthor                => "%{[parsed][book][author]}"
      title                 => "%{[parsed][book][title]}"
      genre                 => "%{[parsed][book][genre]}"
      price                => "%{[parsed][book][price]}"
      publish_date             => "%{[parsed][book][publish_date]}"
      description        => "%{[parsed][book][description]}"
    }
  }
}

output 
{
    elasticsearch {
hosts => "localhost:9200"
index => "xml_test"
}
    stdout 
    {
        codec => rubydebug
    }
}

xml文件的链接
我试着用logstash在elasticsearh long back中插入数据。希望这能奏效。