The colors in that screenshot are not customizable in the lookup editor. They are inherited from global Splunk coloring of certain key words.
e.g. http://docs.splunk.com/Documentation/PCI/2.1.1/Install/Notableevents shows the coloring for severity values
... View more