how can i use the event type to highlight all events, not just to highlight the left side ?
Hi,
To try to do this, you can use eventtypes.cont and event_renderers.conf.
Call your eventtype which is define from eventtypes.conf in event_renderers.conf.
You will define a CSS class in event_renderers.conf.
After do this, you can externalize your css style rules for this in $APP/appserver/static/application.css
. For example, to make the text red you would add to application.css:.splEvent-foo { color:red; }
This an example of stanza in event_renderers.conf
[event_renderer_1]
eventtype = hawaiian_type
priority = 1
css_class = EventRenderer1
with CSS class EventRenderer1 , you can customize your eventtype.
you can follow also the link that follow:
http://docs.splunk.com/Documentation/Splunk/6.2.2/admin/Event_renderersconf