Hi, can I check how can I output this row in a proper format?
E.g.
<LogonTriggers>
<Enabled>
..........
</Enabled>
</LogonTriggers>
My file source type is csv format if that is of any help.
| rex "(?ms)\<Triggers\>(?<Triggers>.*?)\</Triggers\>"
| table Triggers
@spicynuggs try one of following answer of mine: https://community.splunk.com/t5/Dashboards-Visualizations/XML-to-display-in-a-proper-format-with-tag...
Chrome has a splunk XML formatter you could try