在以下 XML 片段中...
<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xml" href="/static/atom.xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>serverclients</title>
<id>https://splfwdprw2:8089/servicesNS/nobody/search/deployment/server/clients</id>
<updated>2017-04-04T16:14:04-04:00</updated>
<generator build="f3e41e4b37b2" version="6.3.1"/>
<author>
<name>Splunk</name>
</author>
<link href="/servicesNS/nobody/search/deployment/server/clients/_acl" rel="_acl"/>
<link href="/servicesNS/nobody/search/deployment/server/clients/countClients_by_machineType" rel="countClients_by_machineType"/>
<link href="/servicesNS/nobody/search/deployment/server/clients/countRecentDownloads" rel="countRecentDownloads"/>
<link href="/servicesNS/nobody/search/deployment/server/clients/getMatchingAppsForClient_dryRun" rel="getMatchingAppsForClient_dryRun"/>
<link href="/servicesNS/nobody/search/deployment/server/clients/preview" rel="preview"/>
<opensearch:totalResults>1</opensearch:totalResults>
<opensearch:itemsPerPage>18446744073709551615</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
<entry>
<title>00031e8f6c883544b8079037c5eba9ec</title>
<id>https://splfwdprw2:8089/servicesNS/nobody/search/deployment/server/clients/00031e8f6c883544b8079037c5eba9ec</id>
<updated>2017-04-04T16:14:04-04:00</updated>
<link href="/servicesNS/nobody/search/deployment/server/clients/00031e8f6c883544b8079037c5eba9ec" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/servicesNS/nobody/search/deployment/server/clients/00031e8f6c883544b8079037c5eba9ec" rel="list"/>
<link href="/servicesNS/nobody/search/deployment/server/clients/00031e8f6c883544b8079037c5eba9ec" rel="remove"/>
<content type="text/xml">
<s:dict>
<s:key name="applications">
<s:dict>
<s:key name="all_deploymentclient">
<s:dict>
<s:key name="action">Phonehome</s:key>
<s:key name="archive">/opt/splunk/var/run/tmp/all_deploymentclient/all_deploymentclient-1491320471.bundle</s:key>
<s:key name="checksum">0</s:key>
<s:key name="excludeFromUpdate"></s:key>
<s:key name="failedReason"></s:key>
<s:key name="issueReload">0</s:key>
<s:key name="restartSplunkWeb">0</s:key>
<s:key name="restartSplunkd">1</s:key>
<s:key name="result">Ok</s:key>
<s:key name="serverclasses">
<s:list>
<s:item>all_deploymentclient</s:item>
</s:list>
</s:key>
<s:key name="size">10240</s:key>
<s:key name="stateOnClient">enabled</s:key>
<s:key name="timestamp">Tue Apr 4 11:42:54 2017</s:key>
</s:dict>
</s:key>
<s:key name="all_fwd_outputs_18indexers">
<s:dict>
<s:key name="action">Phonehome</s:key>
<s:key name="archive">/opt/splunk/var/run/tmp/all_fwd/all_fwd_outputs_18indexers-1491320471.bundle</s:key>
<s:key name="checksum">0</s:key>
<s:key name="excludeFromUpdate"></s:key>
<s:key name="failedReason"></s:key>
<s:key name="issueReload">0</s:key>
<s:key name="restartSplunkWeb">0</s:key>
<s:key name="restartSplunkd">1</s:key>
<s:key name="result">Ok</s:key>
<s:key name="serverclasses">
<s:list>
<s:item>all_fwd</s:item>
</s:list>
</s:key>
<s:key name="size">10240</s:key>
<s:key name="stateOnClient">enabled</s:key>
<s:key name="timestamp">Tue Apr 4 11:42:54 2017</s:key>
</s:dict>
</s:key>
...我正在尝试提取出现在“s:key name="applications"标签下方的第一层中的任何"s:key name="字符串。在本例中，我正在查找的字符串要提取的是“all_deploymentclient”和“all_fwd_outputs_18indexers”。如果其他字符串出现在同一级别，我也想捕获它们。
我正在使用 xml_grep，但我不确定如何定义参数以获得所需的结果(因为“s:key name=”标签有多个实例，其中一些服务作为一种类型的标题，以及其他分配给它们的值)。
所以，当一切都说完之后，这个例子的提取输出应该是:
all_deploymentclient
all_fwd_outputs_18indexers
我怎样才能做到这一点？是否需要其他实用程序(例如 xpath)？
最佳答案
也许先试试这个(替换 s: 命名空间前缀的快速而肮脏的方法):
cat /var/tmp/content.xml | sed 's/s://g' > cat /var/tmp/content2.xml
然后试试
xmllint --xpath "//key[@name='all_deploymentclient' or @name='all_fwd_outputs_18indexers']/@name" /var/tmp/content2.xml \
| sed "s| name|\nname|g; s/name=\"//; s/\"\$//"
关于xml - 如何从与其他字符串共享相同标记的 XML 文件中提取特定字符串？，我们在Stack Overflow上找到一个类似的问题： https://stackoverflow.com/questions/43217285/