We are trying to make a REST input and the result ...

rshoun · ‎03-30-2017

We are trying to make a REST input and the result is XML data but it has no schema. The Source we are using is the Palo Alto, specifically Panorama, not the firewalls directly. Can someone help me create an XML schema??? (I have been stuck on this for a while!) Is there a way to manually build a schema in splunk for this input?

3no · ‎03-31-2017

Well, without a sample log it won't be easy to help you.

Did you try with :

KVMODE = xml

woodcock · ‎03-31-2017

Actually, KV_MODE = xml.

We are trying to make a REST input and the result is XML data but it has no schema.

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Automating Threat Operations and Threat Hunting with Recorded Future

Join the Conversation