<%inherit file="//layout/base.html" /> <%namespace name="lib" file="//lib.html" import="*" /> <%def name="js()"> % if len(successmessage) > 0: % endif <%def name="css()"> <%coreCSSFiles = ["/static/css/view.css", "/static/css/skins/default/default.css", '/modules/nav/AccountBar.css', '/static/css/print.css', '/static/css/etb.css'] %> <%lib:stylesheet_tags files="${coreCSSFiles}" /> <%def name="body_element_open()"> <% inputCounter = 0 %>

${_('Build event type')}

% if len(successmessage) == 0: % for msg in messages: ${msg} % endfor % endif
${csrf_hidden_input()}

${_('Generated event type')}

    ${eventtype|h}
% if len(eventtype)> 0 and testingurl != None: % endif
% if edited:

% elif eventValues:
${_('Event type features')} % for attr in fieldOrder:
    <% i = 0 %> <% val = eventValues[attr] %> % for subval in val: <% i += 1 %> <% countstr = "%.2d" % i %> <% checked = '' %> <% if attr in checkedValues and str(subval) in checkedValues[attr]: checked = 'checked="checked"' %>
  • % endfor % if attr in fieldValues and fieldValues[attr] != None and len(fieldValues[attr]['modes']) > 1: <% altvalues = [vd['value'] for vd in fieldValues[attr]['modes'] if vd['value'] not in val] %> % if len(altvalues) > 0:
      ${_('  Alternative values:')}
        % for altval in altvalues: <% checked = '' i += 1 countstr = "%.2d" % i inputCounter += 1 %> <% if attr in checkedValues and altval in checkedValues[attr]: checked = 'checked="checked"' %>
      • % endfor
    % endif % endif
% endfor
% endif

${_('Sample events')}

${_('This list is based on the event you selected from your search and the event type built.')}

% for event in events: % endfor
${event | h}

${_('Save event type')}

${_('Note:')} ${_('To ensure the event type works properly, test it before saving.')}


Determines which style wins, when an event
has more than one event type.

${_('Edit event type')}

% if testingurl != None:

${_('Test event type')}

${_('A new Splunk search window will open and allow you to verify that your event type returns the events you want.')}

${_('When you are done testing your event type, close the search testing window and return to the Build event type window to save your event type or further refine it.')}

% endif

${_('Successfully saved event type')}

${_('Your event type has been saved.')}