https://community.splunk.com/t5/Security/Is-it-possible-to-change-the-assigned-color-of-a-specific/m-p/180728#M5370 <P>Is it not possible to change an assigned color of a specific eventtype within the Splunk Web settings? Moreover, if you create an Eventtype by Settings/Eventtypes "New", there is no option to set a color. Am I wrong? Do I have to change the color directly in the file?</P> Thu, 19 Mar 2015 14:17:33 GMT claudio_manig 2015-03-19T14:17:33Z https://community.splunk.com/t5/Security/Is-it-possible-to-change-the-assigned-color-of-a-specific/m-p/180728#M5370 <P>Is it not possible to change an assigned color of a specific eventtype within the Splunk Web settings? Moreover, if you create an Eventtype by Settings/Eventtypes "New", there is no option to set a color. Am I wrong? Do I have to change the color directly in the file?</P> Thu, 19 Mar 2015 14:17:33 GMT https://community.splunk.com/t5/Security/Is-it-possible-to-change-the-assigned-color-of-a-specific/m-p/180728#M5370 claudio_manig 2015-03-19T14:17:33Z https://community.splunk.com/t5/Security/Is-it-possible-to-change-the-assigned-color-of-a-specific/m-p/180729#M5371 <P>Hi,<BR /> You can refer to this link :<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.2.2/Knowledge/defineeventtypes">Define Eventtypes</A></P> Thu, 19 Mar 2015 14:49:56 GMT https://community.splunk.com/t5/Security/Is-it-possible-to-change-the-assigned-color-of-a-specific/m-p/180729#M5371 harshal_chakran 2015-03-19T14:49:56Z https://community.splunk.com/t5/Security/Is-it-possible-to-change-the-assigned-color-of-a-specific/m-p/180730#M5372 <P>Hi,<BR /> Only take eventtype's search string and rerun. Save as eventtype with a same name and give him a new color.</P> Thu, 19 Mar 2015 16:13:32 GMT https://community.splunk.com/t5/Security/Is-it-possible-to-change-the-assigned-color-of-a-specific/m-p/180730#M5372 ngatchasandra 2015-03-19T16:13:32Z https://community.splunk.com/t5/Security/Is-it-possible-to-change-the-assigned-color-of-a-specific/m-p/180731#M5373 <P>There is nothing refering to my question in the docs...</P> Fri, 20 Mar 2015 07:25:45 GMT https://community.splunk.com/t5/Security/Is-it-possible-to-change-the-assigned-color-of-a-specific/m-p/180731#M5373 claudio_manig 2015-03-20T07:25:45Z https://community.splunk.com/t5/Security/Is-it-possible-to-change-the-assigned-color-of-a-specific/m-p/180732#M5374 <P>That won't work as it allready exists and you can not save an object with the same name with different configs-- </P> Fri, 20 Mar 2015 07:35:33 GMT https://community.splunk.com/t5/Security/Is-it-possible-to-change-the-assigned-color-of-a-specific/m-p/180732#M5374 claudio_manig 2015-03-20T07:35:33Z https://community.splunk.com/t5/Security/Is-it-possible-to-change-the-assigned-color-of-a-specific/m-p/180733#M5375 <P>In your app (I'll use the default search app as the example though) you edit the <STRONG>event_renderers.conf</STRONG> file. For the default search app this would be under <STRONG>Splunk/etc/users/%user% (for example admin)/search/local</STRONG>. In this file you will find an example like below.</P> <PRE><CODE>[eventtype_name_stanza] css_class = et_red eventtype = eventtype_name priority = 6 </CODE></PRE> <P>The colour is being set by "css_class = et_red" from the file <STRONG>application.css</STRONG> which for the default search app would be under <STRONG>Splunk/etc/apps/search/appserver/static</STRONG>. You can even play with this real time in Firefox or Chrome by editing the html on the search results page.</P> <P>By default it will be like so (standard white no eventtype colours).</P> <PRE><CODE>&lt;td class="expands " tabindex="0"&gt;&lt;a&gt;&lt;i class="icon-triangle-right-small"&gt;&lt;/i&gt;&lt;/a&gt;&lt;/td&gt; </CODE></PRE> <P>If you edit the html to be purple you will see it change.</P> <PRE><CODE>&lt;td class="expands et_purple" tabindex="0"&gt;&lt;a&gt;&lt;i class="icon-triangle-right-small"&gt;&lt;/i&gt;&lt;/a&gt;&lt;/td&gt; </CODE></PRE> Tue, 29 Sep 2020 08:54:28 GMT https://community.splunk.com/t5/Security/Is-it-possible-to-change-the-assigned-color-of-a-specific/m-p/180733#M5375 conor_splunk 2020-09-29T08:54:28Z