https://community.splunk.com/t5/Getting-Data-In/What-is-the-correct-sourcetype-to-configure-data-input-in-Splunk/m-p/127052#M26145 <P>I'm looking for a data sourcetype to use with monitoring an endpoint using XML parser. What would be the correct datasource type to configure the data input in splunk as XML instead of raw?</P> <P>Raw Output:<BR /> POST syslog.name.com HTTP/1.1 Host: 10.10.10.10 User-Agent: CyberData/1.0.0 Content-Length: 195 Content-Type: application/x-www-form-urlencoded %3c%3fxml+version%3d%221.0%22+encoding%3d%22ISO-8859-1%22%3f%3e%0a%3ccyberdata+NAME%3d%27Front+Door+Intercom%27+MAC%3d%270020f7020ce7%27%3e%0a%3cevent%3ePOWERON%3c%2fevent%3e%0a%3c%2fcyberdata%3e</P> Tue, 01 Jul 2014 17:02:58 GMT edbenitez 2014-07-01T17:02:58Z https://community.splunk.com/t5/Getting-Data-In/What-is-the-correct-sourcetype-to-configure-data-input-in-Splunk/m-p/127052#M26145 <P>I'm looking for a data sourcetype to use with monitoring an endpoint using XML parser. What would be the correct datasource type to configure the data input in splunk as XML instead of raw?</P> <P>Raw Output:<BR /> POST syslog.name.com HTTP/1.1 Host: 10.10.10.10 User-Agent: CyberData/1.0.0 Content-Length: 195 Content-Type: application/x-www-form-urlencoded %3c%3fxml+version%3d%221.0%22+encoding%3d%22ISO-8859-1%22%3f%3e%0a%3ccyberdata+NAME%3d%27Front+Door+Intercom%27+MAC%3d%270020f7020ce7%27%3e%0a%3cevent%3ePOWERON%3c%2fevent%3e%0a%3c%2fcyberdata%3e</P> Tue, 01 Jul 2014 17:02:58 GMT https://community.splunk.com/t5/Getting-Data-In/What-is-the-correct-sourcetype-to-configure-data-input-in-Splunk/m-p/127052#M26145 edbenitez 2014-07-01T17:02:58Z https://community.splunk.com/t5/Getting-Data-In/What-is-the-correct-sourcetype-to-configure-data-input-in-Splunk/m-p/127053#M26146 <P>If you haven't found the answer already, check out these two other posts</P> <P><A href="https://answers.splunk.com/answers/2141/xml-log-source-type.html">https://answers.splunk.com/answers/2141/xml-log-source-type.html</A></P> <P><A href="https://answers.splunk.com/answers/187195/how-to-add-and-parse-xml-data-in-splunk.html">https://answers.splunk.com/answers/187195/how-to-add-and-parse-xml-data-in-splunk.html</A></P> Tue, 19 Jan 2016 19:20:05 GMT https://community.splunk.com/t5/Getting-Data-In/What-is-the-correct-sourcetype-to-configure-data-input-in-Splunk/m-p/127053#M26146 reswob4 2016-01-19T19:20:05Z