<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: unable to get XML to parse correctly in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/unable-to-get-XML-to-parse-correctly/m-p/455819#M78838</link>
    <description>&lt;P&gt;Try this one:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;LINE_BREAKER=([\r\n])\&amp;lt;ErrorMessage
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Tue, 19 Feb 2019 15:49:08 GMT</pubDate>
    <dc:creator>markusspitzli</dc:creator>
    <dc:date>2019-02-19T15:49:08Z</dc:date>
    <item>
      <title>unable to get XML to parse correctly</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/unable-to-get-XML-to-parse-correctly/m-p/455818#M78837</link>
      <description>&lt;P&gt;Got an XML file that for the life of me I can not get parse correctly. I have tried to use &lt;CODE&gt;LINE_BREAKER&lt;/CODE&gt; on the 1st line, on '(greaterthan)ErrorMessage' and also tried to 'MUST_BREAK_AFTER' '(greaterthan)/ErrorMessage(lessthan)'. What happens is that it keeps breaking at  (using example data below) '(greaterthan)Cookie Name='starttime' Value='10/26/2018 10:10:36 AM'/(lessthan)' so what should be 1 events gets broken into 2.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;!-- ------------------------------------------------------- --&amp;gt;
&amp;lt;ErrorMessage Id='20181026101115422' Date='10/26/2018' Time='10:11 AM' &amp;gt;
  &amp;lt;CurrentUser UserName='user1 Instance='DEVO'/&amp;gt;
  &amp;lt;RequestInformation
     Hostname='10.xxx.xxx.xxx' 
     HostAddress='10.xxx.xxx.xxx'
     HostBrowser='Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; wbx 1.0.0)'
     ReferringPage='https://web.site.com'
     RequestType='GET'
     ContentLength='0'
     RawUrl='/BSEES/BackGroundScreeningResultsScreening.aspx?sk=SK1943959381'&amp;gt;
    &amp;lt;Browser Type='IE7' Browser='IE' Version='7.0' Platform='WinNT' SupportsFrames='True' SupportsJavascript='True' SupportsTables='True'SupportsCookies='True'/&amp;gt;
    &amp;lt;Cookies&amp;gt;
      &amp;lt;Cookie Name='visid_incap_1275982' Value='lNef3NDSQcyOf0lXjW2Nrx+G0FsAAAAAQUIPAAAAAAAt8gyRIE8R8UaxAc228cmJ'/&amp;gt;
      &amp;lt;Cookie Name='incap_ses_1000_1275982' Value='dRL7TVrvM16YD3QZKLfgDWIu01sAAAAA6zG7B1/C6/5Pjit48Gj4RQ=='/&amp;gt;
      &amp;lt;Cookie Name='ASP.NET_SessionId' Value='cptssgf1ynquuwwic3kvna21'/&amp;gt;
      &amp;lt;Cookie Name='us' Value='uname=eLsRhq6hvGqJYmT2mOc%2f8w%3d%3d'/&amp;gt;
      &amp;lt;Cookie Name='starttime' Value='10/26/2018 10:10:36 AM'/&amp;gt;
    &amp;lt;/Cookies&amp;gt;
    &amp;lt;Form&amp;gt;
    &amp;lt;/Form&amp;gt;
  &amp;lt;/RequestInformation&amp;gt;
  &amp;lt;Exception Message='System.Web.Services.Protocols.SoapException: Server was unable to process request. ---&amp;gt; System.Exception: MSHP userid not found for the current userid: user1
   at BSEES_HPMQ_WS.HPDAComp.RunHPInqForPartyId(Int64 p_partyId) in C:\_Sandboxes\Systems\COMMON\file.vb:line 489
   at BSEES_HPMQ_WS.BSEES_HPMQService.RunHPInqForPartyId(Int64 p_partyId) in C:\_Sandboxes\Systems\COMMON\file.asmx.vb:line 78
   --- End of inner exception stack trace ---'&amp;gt;
    &amp;lt;StackTrace&amp;gt;
      &amp;lt;![CDATA[
   at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
   at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
   at BSEES_WS_Proxy.svcBSEESHPMQ.BSEES_HPMQService.RunHPInqForPartyId(Int64 p_partyId) in C:\_Sandboxes\Systems\BSEES\file.vb:line 138
   at BSEES.BackGroundScreeningResultsScreening.DISPLAY_CSHP_RESULTS() in C:\_Sandboxes\Systems\file.aspx.vb:line 621
]]&amp;gt;
    &amp;lt;/StackTrace&amp;gt;
  &amp;lt;/Exception&amp;gt;
&amp;lt;/ErrorMessage&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Tue, 29 Sep 2020 21:50:36 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/unable-to-get-XML-to-parse-correctly/m-p/455818#M78837</guid>
      <dc:creator>cboillot</dc:creator>
      <dc:date>2020-09-29T21:50:36Z</dc:date>
    </item>
    <item>
      <title>Re: unable to get XML to parse correctly</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/unable-to-get-XML-to-parse-correctly/m-p/455819#M78838</link>
      <description>&lt;P&gt;Try this one:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;LINE_BREAKER=([\r\n])\&amp;lt;ErrorMessage
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Tue, 19 Feb 2019 15:49:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/unable-to-get-XML-to-parse-correctly/m-p/455819#M78838</guid>
      <dc:creator>markusspitzli</dc:creator>
      <dc:date>2019-02-19T15:49:08Z</dc:date>
    </item>
  </channel>
</rss>

