Splunk Search

Index XML files from a url

abhijitnath89
Path Finder

How can we index XML files from a url ending in .xml in splunk?
We have an XML URL that we need to index into splunk, is there any way that can be done?

Tags (1)
0 Karma

woodcock
Esteemed Legend

You could create your own modular input to do this; it would make a fine learning project.

0 Karma

woodcock
Esteemed Legend

You could start with the GetWatchList app which does this for CSV files and deconstruct and repurpose it:

https://splunkbase.splunk.com/app/635/

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi abhijitnath89,
the easiest way is to create a script that copies your xml files in your disk and then you can index it as usual.
Bye.
Giuseppe

0 Karma

abhijitnath89
Path Finder

We cannot put the XML files in the disk, it is possible to directly take the XML information from the URL using something like website input?

0 Karma

gcusello
SplunkTrust
SplunkTrust

To save xml file on disk is easier, but you can create a script that parses the xml file.
After you put this file in your app's bin folder.
And call your script in inputs.conf, output is sent to Splunk.

To see how to create this script see a script in one app like TA-Windows or TA-nix.

Bye.
Giuseppe

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...