Splunk Enterprise Security

Splunk Enterprise Security: How can I edit a notable table in the Incident Review dashboard to alternate row colors?

tonymorin
Explorer

I want to zebra strip (gray, white, gray, white)/alternate the row colors in the triggered notable table in the Incident Review dashboard. I need help either editing or converting it to HTML so i can edit the raw code. I know the CSS to add, just need to know how or if i can edit?
alt text

Thanks in advance

0 Karma
1 Solution

jstoner_splunk
Splunk Employee
Splunk Employee

I have not played around with it in depth but the place you will want to look is in $SPLUNK_HOME/etc/apps/SA-ThreatIntelligence/appserver/static/js/components/incident_review.

There are css and js files that can be manipulated.

View solution in original post

0 Karma

jstoner_splunk
Splunk Employee
Splunk Employee

I have not played around with it in depth but the place you will want to look is in $SPLUNK_HOME/etc/apps/SA-ThreatIntelligence/appserver/static/js/components/incident_review.

There are css and js files that can be manipulated.

0 Karma

aakwah
Builder

I think that was possible at 2017 😊

Now there is an automatically generated js file here ./apps/SA-ThreatIntelligence/appserver/static/build/pages/incident_review.js 

0 Karma

tonymorin
Explorer

cool thanks I will check it out on my test server. and get back you to if i can get it to work.

0 Karma
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...