Switched consumer to run json instead of xml to avoid xmlstreaming. This
will require Splunk 5.0.3 to work properly