I have the following coming in via an XML file. Most of the attributes parse just fine using the default parser, but I cannot figure out what i need to put into a props.conf file to parse out all of the applications that are coming over. I am new to Splunk, so any suggestions would be greatly appreciated.
`<computer>`
`<name>ACC1582</name>`
`<udid>0D935CF2-ECFD-5A04-8303-34B6564EC820</udid>`
`<id>291</id>`
`<Computer_Name>ACC1582</Computer_Name>`
`<JAMF_Binary_Version>10.8.0-t1539715549</JAMF_Binary_Version>`
`<Last_Check_in>2018-11-20 18:18:08</Last_Check_in>`
`<Make>Apple</Make>`
`<Model>15-inch Retina MacBook Pro (Mid 2012)</Model>`
`<Serial_Number>C02J362MDKQ5</Serial_Number>`
`<FileVault_Status>1/2</FileVault_Status>`
`<Operating_System>Mac OS X 10.10.5</Operating_System>`
`<Operating_System_Build>14F2511</Operating_System_Build>`
`<Operating_System_Name>Mac OS X</Operating_System_Name>`
`<Operating_System_Version>10.10.5</Operating_System_Version>`
`<Service_Pack/>`
`<Applications>`
`<Application>`
`<Application_Title>8x8 - Virtual Office.app</Application_Title>`
`<Application_Version>5.4.0.19776</Application_Version>`
`</Application>`
`<Application>`
`<Application_Title>Adium.app</Application_Title>`
`<Application_Version>1.3.10</Application_Version>`
`</Application>`
`</Applications>`
`</computer>`
