We are trying to make a REST input and the result ...

rshoun · ‎03-30-2017

We are trying to make a REST input and the result is XML data but it has no schema. The Source we are using is the Palo Alto, specifically Panorama, not the firewalls directly. Can someone help me create an XML schema??? (I have been stuck on this for a while!) Is there a way to manually build a schema in splunk for this input?

3no · ‎03-31-2017

Well, without a sample log it won't be easy to help you.

Did you try with :

KVMODE = xml

woodcock · ‎03-31-2017

Actually, KV_MODE = xml.

We are trying to make a REST input and the result is XML data but it has no schema.

Thanks for the Memories! Splunk University, .conf25, and our Community

Data Persistence in the OpenTelemetry Collector

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever

Are you a member of the Splunk Community?

We are trying to make a REST input and the result is XML data but it has no schema.

Thanks for the Memories! Splunk University, .conf25, and our Community

Data Persistence in the OpenTelemetry Collector

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever