Index XML files from a url

[abhijitnath89]

How can we index XML files from a url ending in .xml in splunk?
We have an XML URL that we need to index into splunk, is there any way that can be done?

[woodcock]

You could create your own modular input to do this; it would make a fine learning project.

[woodcock]

You could start with the GetWatchList app which does this for CSV files and deconstruct and repurpose it:

https://splunkbase.splunk.com/app/635/

[gcusello]

Hi abhijitnath89,
the easiest way is to create a script that copies your xml files in your disk and then you can index it as usual.
Bye.
Giuseppe

[abhijitnath89]

We cannot put the XML files in the disk, it is possible to directly take the XML information from the URL using something like website input?

[gcusello]

To save xml file on disk is easier, but you can create a script that parses the xml file.
After you put this file in your app's bin folder.
And call your script in inputs.conf, output is sent to Splunk.

To see how to create this script see a script in one app like TA-Windows or TA-nix.

Bye.
Giuseppe