Extending Splunk - Implementing Splunk: Big Data Reporting and Development for Operational Intelligence - page 401

</li>
<li>
<b>logger:</b>
${event.get('logger', '')}
</li>
<li>
<b>message:</b>
${event.get('message', '')}
</li>
<li>
<b>req_time:</b>
${event.get('req_time', '')}
</li>
<li>
<b>session_id:</b>
${event.get('session_id', '')}
</li>
<li>
<b>user:</b>
${event.get('user', '')}
</li>
<li>
<b>_raw:</b>
${event.get('_raw', '')}
</li>
</ul>
</%page>
This template outputs a <ul> block for each event, with the specific fields we want
displayed. To connect this template to a specific event type, we need the following
entry in default/event_renderers.conf :
[template_example]
eventtype = template_example
template = template_example.html
Finally, if we want to format our output, we can use the following CSS in
appserver/static/application.css :
ul.template_example {
list-style-type: none;
}
ul.template_example > li {
background-color: #dddddd;
padding: 4px;
margin: 1px;
}