I have been working with a product that, out-of-box, outputs a “raw” XML syslog in a proprietary (but simple) XML format and we are needing to transform some of the information in some of the messages.