Log XML payload in splunk exposing ingestion as separate api

Not applicable

we are trying to ingest the logs from proxies (entry point/ with payload/ exit point), instead of having the message logger in each policy its been build as a separate proxy. and it will be invoked as JSon with all parameters required for logging. Now the problem is when we log the XML payload using the JSON splunk ingestion api. XML inside JSON object is not allowed. please advise on any suggesstions?

thanks in advance

0 2 355
2 REPLIES 2

Before sending XML inside JSON, change XML by replacing \" to ' and remove line breaks should work

the XML payload is huge with many attrributes. and we dont want to take extra load by parsing and replacing .