Does anyone know how to use the highlight command to highlight strings in a table, not just raw events?

[agodoy]

Any idea on how to use the highlight command to highlight strings that are in a table? It only appears to work when looking at raw events.

Highlight command reference:

[MuS]

Hi agodoy,

If you're on Splunk 6.x and want to use simple XML, take a look at the Dashboard examples https://apps.splunk.com/app/1603/ which provide multiple examples how it can be done.

cheers, MuS

[kikexclusive]

Are you currently using Sideview Utils + Advanced XML? I would suggest you create a table in the Advanced XML panel. Then I would use the background-color CSS property. As an example, this is how it would look like:

<module name="Search" layoutPanel="panel_row1_col1" autoRun="False">
    <param name="search">
index="index1" | table field1 field2 field3
    </param>
    <module name="Table">
        <param name="columns.field1.style">background-color:rgb(206,236,245)</param>
    </module>
</module>