https://community.splunk.com/t5/Splunk-Search/Icons-for-severities/m-p/77249#M181528 <P>How to add an icon associated with the severity in the start of each event in the search, just like the Cisco CNA System Messages? Or at least make each event with a background color associated with the severity? Is there an app for that?</P> Fri, 16 Sep 2011 18:17:35 GMT drpsycho 2011-09-16T18:17:35Z https://community.splunk.com/t5/Splunk-Search/Icons-for-severities/m-p/77249#M181528 <P>How to add an icon associated with the severity in the start of each event in the search, just like the Cisco CNA System Messages? Or at least make each event with a background color associated with the severity? Is there an app for that?</P> Fri, 16 Sep 2011 18:17:35 GMT https://community.splunk.com/t5/Splunk-Search/Icons-for-severities/m-p/77249#M181528 drpsycho 2011-09-16T18:17:35Z https://community.splunk.com/t5/Splunk-Search/Icons-for-severities/m-p/77250#M181529 <P>Hello,</P> <P>have a look here, but it will requires some web development knowledge, but it works:<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/latest/Developer/UseCSS">http://docs.splunk.com/Documentation/Splunk/latest/Developer/UseCSS</A></P> Sun, 05 Feb 2012 20:41:27 GMT https://community.splunk.com/t5/Splunk-Search/Icons-for-severities/m-p/77250#M181529 Mathieu_Dessus 2012-02-05T20:41:27Z https://community.splunk.com/t5/Splunk-Search/Icons-for-severities/m-p/77251#M181530 <P>You could use the iconify search command.</P> <P>So if you extract the severity level out into a field named "severity", you could do something like :</P> <PRE><CODE>yourinitialsearch | iconify severity </CODE></PRE> <P><A href="http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Iconify">http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Iconify</A></P> Sun, 05 Feb 2012 23:22:58 GMT https://community.splunk.com/t5/Splunk-Search/Icons-for-severities/m-p/77251#M181530 Damien_Dallimor 2012-02-05T23:22:58Z