https://community.splunk.com/t5/Splunk-Enterprise/Why-am-I-unable-to-ingest-xml-data-into-Splunk/m-p/648442#M16659 Have you try to escape [] characters as those have special meaning in regex? Tue, 27 Jun 2023 20:19:54 GMT isoutamo 2023-06-27T20:19:54Z https://community.splunk.com/t5/Splunk-Enterprise/Why-am-I-unable-to-ingest-xml-data-into-Splunk/m-p/647808#M16625 <P>I am tring to ingest xml file data using below inputs.conf configuration.</P> <P>I am unable to ingest the data. i am not getting any ERROR in internal logs as well.</P> <P>Source Path is as follows:&nbsp;</P> <P>D:\ARDS\MASS\Data\ExecutionReport\ExecutionReport_Task[SendLabelNetisuq]_Job[5c522e65-a46f-4445-a9ca-3192e6c391b7]_20230614-182807-394995.xml</P> <P>[monitor://D:\ARDS\MASS\Data\ExecutionReport\ExecutionReport_Task[SendLabelNetisuq]_Job*_*.xml]</P> <P>disabled = false</P> <P>sourcetype = abc:xyz:executionreport</P> <P>index = log_abc</P> <P>crcSalt=&lt;SOURCE&gt;</P> Wed, 28 Jun 2023 15:34:22 GMT https://community.splunk.com/t5/Splunk-Enterprise/Why-am-I-unable-to-ingest-xml-data-into-Splunk/m-p/647808#M16625 sagar_shubham23 2023-06-28T15:34:22Z https://community.splunk.com/t5/Splunk-Enterprise/Why-am-I-unable-to-ingest-xml-data-into-Splunk/m-p/648442#M16659 Have you try to escape [] characters as those have special meaning in regex? Tue, 27 Jun 2023 20:19:54 GMT https://community.splunk.com/t5/Splunk-Enterprise/Why-am-I-unable-to-ingest-xml-data-into-Splunk/m-p/648442#M16659 isoutamo 2023-06-27T20:19:54Z