event_renderers.conf
This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
event_renderers.conf
The following are the spec and example files for event_renderers.conf.
event_renderers.conf.spec
# Copyright (C) 2005-2011 Splunk Inc. All Rights Reserved. Version 4.3
#
# This file contains possible attribute/value pairs for configuring event rendering properties.
#
# There is an event_renderers.conf in $SPLUNK_HOME/etc/system/default/. To set custom configurations,
# place an event_renderers.conf in $SPLUNK_HOME/etc/system/local/, or your own custom app directory.
#
# To learn more about configuration files (including precedence) please see the documentation
# located at http://docs.splunk.com/Documentation/Splunk/latest/Admin/Aboutconfigurationfiles
[<name>]
* Stanza name. This name must be unique.
eventtype = <event type>
* Specify event type name from eventtypes.conf.
priority = <positive integer>
* Highest number wins!!
template = <valid Mako template>
* Any template from the $APP/appserver/event_renderers directory.
css_class = <css class name suffix to apply to the parent event element class attribute>
* This can be any valid css class value.
* The value is appended to a standard suffix string of "splEvent-". A css_class value of foo would
result in the parent element of the event having an html attribute class with a value of splEvent-foo
(for example, class="splEvent-foo"). You can externalize your css style rules for this in
$APP/appserver/static/application.css. For example, to make the text red you would add to
application.css:.splEvent-foo { color:red; }
event_renderers.conf.example
# Copyright (C) 2005-2011 Splunk Inc. All Rights Reserved. Version 4.3 # DO NOT EDIT THIS FILE! # Please make all changes to files in $SPLUNK_HOME/etc/system/local. # To make changes, copy the section/stanza you want to change from $SPLUNK_HOME/etc/system/default # into ../local and edit there. # # This file contains mappings between Splunk eventtypes and event renderers. # [event_renderer_1] eventtype = hawaiian_type priority = 1 css_class = EventRenderer1 [event_renderer_2] eventtype = french_food_type priority = 1 template = event_renderer2.html css_class = EventRenderer2 [event_renderer_3] eventtype = japan_type priority = 1 css_class = EventRenderer3
This documentation applies to the following versions of Splunk: 4.3 View the Article History for its revisions.