Splunk Search

How I can make rows in red color of a table of a view if some condition meets

kml_uvce
Builder

How I can make rows in red color of a table of a view if some condition meets
for example in table output of this view
"index="siebel_mon" SourceName=Siebel Message="Siebel 7 -" |fields _time,siebel_message,EventCode"

, So in table the rows should be in red color If EventCode=113

-Kamal

kamal singh bisht
Tags (1)
0 Karma

Takajian
Builder

Although I do not know how to make rows in red color of a table, there is the way to make red color of the event.
Is this work for you?

http://splunk-base.splunk.com/answers/8775/configure-colour-coded-results-by-default

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...