Extending Splunk - Implementing Splunk: Big Data Reporting and Development for Operational Intelligence - page 406

We can then simply search for our example source type as follows:
index="implsplunk" sourcetype="xml_example"
This renders the following output:
The XML in the first event is invalid, so an error message is appended to the
original value.