This sample file has been successfully tested with eagle_default/in/xml/xml-ref_security_overrides.xml rule
<EagleML xmlns="http://www.eagleinvsys.com/2011/EagleML-2-0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" eaglemlVersion="2-0" eaglemlType="ReferenceTransactionMessage" xsi:schemaLocation="http://www.eagleinvsys.com/2011/EagleML-2-0 eagleml-main-2-0.xsd" xsi:type="ReferenceTransactionMessage"> <header> <messageId messageIdScheme="http://www.eagleinvsys.com/coding-scheme/message-id-2-0">TSTR827</messageId> <sentBy>http://www.eagleinvsys.com/</sentBy> </header> <referenceTransaction> <header> <objectType>SecurityOverrides</objectType> </header> <securityOverrides> <objectType>SecurityOverrides</objectType> <objectId>SecurityOverrides</objectId> <objectDescription>SecurityOverrides</objectDescription> <updateTimestamp>2017-03-07T13:15:26</updateTimestamp> <sourceName>OVERLAY</sourceName> <updateSource>MCADMIN</updateSource> <primaryAssetId>BT149193_1</primaryAssetId> <primaryAssetType>CUSIP</primaryAssetType> <tableName>SECURITY_MASTER_DETAIL</tableName> <fieldName>USER_GROUP_CHAR1</fieldName> <valueChar>TEST 1</valueChar> <startDate>2017-03-01</startDate> <endDate>2017-03-10</endDate> <comments>COMMENTS TEST 1</comments> <reasonCode>REASON 1</reasonCode> <tempOverlay>Y</tempOverlay> </securityOverrides> </referenceTransaction> </EagleML>