How XML monitoring works
You can provide multiple search criteria involving the same or different elements with respective expressions for a single XML instance.
The KM parses the search criteria, and uniquely stores elements with their respective search patterns in a hierarchical order that you provided in the input. Therefore, it is very important to provide the same hierarchy for all search criteria for an XML instance; otherwise the search may not return expected results.
The KM optimizes the XML search such that it executes search patterns, if any, for each element in the XML file, only once. It optimizes the XML search such that it executes duplicate search patterns for an element across different search criteria, only once.
The KM evaluates the search criterion for a match upon reaching the closing tag of the first element in the input. The valid arithmetic expression is evaluated for each search criteria. Hence, it is important to provide the parent element when there is more than one element present in the search criterion, with an expression between them.
When the search criterion is successful, the KM displays the matched content for all elements of that search criterion in the LOGMatchString parameter.
If the provided regular expression does not match some element and yet the search criterion results in success, the product returns a string such as (not found) for such elements. It notifies you that though the search criterion matched, the respective search pattern did not match for the element. This can happen when there is an OR operation.
Once the KM scans the whole file successfully, it generates events, if any, for each search criterion.