event_renderers.conf
This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
event_renderers.conf
The following are the spec and example files for event_renderers.conf.
event_renderers.conf.spec
# Copyright (C) 2005-2010 Splunk Inc. All Rights Reserved. Version 4.1.5
#
# This file contains possible attribute/value pairs for configuring event rendering properties.
#
# There is an event_renderers.conf in $SPLUNK_HOME/etc/system/default/. To set custom configurations,
# place an event_renderers.conf in $SPLUNK_HOME/etc/system/local/, or your own custom app directory.
#
# To learn more about configuration files (including precedence) please see the documentation
# located at http://www.splunk.com/base/Documentation/latest/Admin/Aboutconfigurationfiles
[<name>]
* Stanza name.
* Unique.
eventtype = <eventtype>
* Specify eventtype name.
* From eventtypes.conf.
priority = <positive integer>
* Highest number wins
template = <valid mako template>
* Any template from the $APP/appserver/event_renderers directory.
css_class = <css class name suffix to apply to the parent event element class attribute>
* This can be any valid css class value.
The value is appended to a standard suffix string of "splEvent-". A css_class value of foo would result in the parent
element of the event having an html attribute class with a value of splEvent-foo (eg., class="splEvent-foo"). You can
externalize your css style rules for this in $APP/appserver/static/application.css. So for example to make the text red you
would add to application.css:
.splEvent-foo { color:red; }
event_renderers.conf.example
# Copyright (C) 2005-2010 Splunk Inc. All Rights Reserved. Version 4.1.5 # DO NOT EDIT THIS FILE! # Please make all changes to files in $SPLUNK_HOME/etc/system/local. # To make changes, copy the section/stanza you want to change from $SPLUNK_HOME/etc/system/default # into ../local and edit there. # # This file contains mappings between Splunk eventtypes and event renderers. # [event_renderer_1] eventtype = hawaiian_type priority = 1 css_class = EventRenderer1 [event_renderer_2] eventtype = french_food_type priority = 1 template = event_renderer2.html css_class = EventRenderer2 [event_renderer_3] eventtype = japan_type priority = 1 css_class = EventRenderer3
This documentation applies to the following versions of Splunk: 4.1 , 4.1.1 , 4.1.2 , 4.1.3 , 4.1.4 , 4.1.5 View the Article History for its revisions.