I have the following coming in via an XML file. Most of the attributes parse just fine using the default parser, but I cannot figure out what i need to put into a props.conf file to parse out all of the applications that are coming over. I am new to Splunk, so any suggestions would be greatly appreciated. `<computer>` `<name>ACC1582</name>` `<udid>0D935CF2-ECFD-5A04-8303-34B6564EC820</udid>` `<id>291</id>` `<Computer_Name>ACC1582</Computer_Name>` `<JAMF_Binary_Version>10.8.0-t1539715549</JAMF_Binary_Version>` `<Last_Check_in>2018-11-20 18:18:08</Last_Check_in>` `<Make>Apple</Make>` `<Model>15-inch Retina MacBook Pro (Mid 2012)</Model>` `<Serial_Number>C02J362MDKQ5</Serial_Number>` `<FileVault_Status>1/2</FileVault_Status>` `<Operating_System>Mac OS X 10.10.5</Operating_System>` `<Operating_System_Build>14F2511</Operating_System_Build>` `<Operating_System_Name>Mac OS X</Operating_System_Name>` `<Operating_System_Version>10.10.5</Operating_System_Version>` `<Service_Pack/>` `<Applications>` `<Application>` `<Application_Title>8x8 - Virtual Office.app</Application_Title>` `<Application_Version>5.4.0.19776</Application_Version>` `</Application>` `<Application>` `<Application_Title>Adium.app</Application_Title>` `<Application_Version>1.3.10</Application_Version>` `</Application>` `</Applications>` `</computer>` ... View more

I have a basic dropdown in a form where we are searching for a user name in First Name Last Name format. I want to be able to take that token and use it in searches with multiple variations. An example is : index=foo search user="First Name Last Name" OR user="First Name.LastName". Any help appreciated! ... View more