Splunk Search

How I can make rows in red color of a table of a view if some condition meets

kml_uvce
Builder

How I can make rows in red color of a table of a view if some condition meets
for example in table output of this view
"index="siebel_mon" SourceName=Siebel Message="Siebel 7 -" |fields _time,siebel_message,EventCode"

, So in table the rows should be in red color If EventCode=113

-Kamal

Tags (1)
0 Karma

Takajian
Builder

Although I do not know how to make rows in red color of a table, there is the way to make red color of the event.
Is this work for you?

http://splunk-base.splunk.com/answers/8775/configure-colour-coded-results-by-default

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...

Updated Data Management and AWS GDI Inventory in Splunk Observability

We’re making some changes to Data Management and Infrastructure Inventory for AWS. The Data Management page, ...