https://community.splunk.com/t5/Splunk-Search/help-on-if-condition-for-results-0/m-p/494751#M194538 <P>Great @jip31. Can you please upvote and accept this answer to close this question?</P> Thu, 10 Oct 2019 06:18:14 GMT kamlesh_vaghela 2019-10-10T06:18:14Z https://community.splunk.com/t5/Splunk-Search/help-on-if-condition-for-results-0/m-p/494748#M194535 <P>hello</P> <P>In a panel table, I need to display every key_path even if the key_path result = 0<BR /> I have done an if condition but it doenst works<BR /> could you help me please??</P> <PRE><CODE>index="toto" sourcetype="WinRegistry" key_path="HKLM\\software\\microsoft\\windows nt\\currentversion\\xx" OR key_path="HKLM\\software\\microsoft\\windows nt\\currentversion\\yy" OR key_path="HKLM\\software\\wow6432node\\zz" | stats dc(host) as test by sourcetype key_path | eval test=if(test==0,"0", test) </CODE></PRE> Wed, 30 Sep 2020 02:25:51 GMT https://community.splunk.com/t5/Splunk-Search/help-on-if-condition-for-results-0/m-p/494748#M194535 jip31 2020-09-30T02:25:51Z https://community.splunk.com/t5/Splunk-Search/help-on-if-condition-for-results-0/m-p/494749#M194536 <P>@jip31 </P> <P>Can you please try this?</P> <PRE><CODE>index="toto" sourcetype="WinRegistry" key_path="HKLM\\software\\microsoft\\windows nt\\currentversion\\xx" OR key_path="HKLM\\software\\microsoft\\windows nt\\currentversion\\yy" OR key_path="HKLM\\software\\wow6432node\\zz" | stats dc(host) as count by sourcetype key_path | append [| makeresults | eval sourcetype="WinRegistry", count=0, key_path="HKLM\\software\\microsoft\\windows nt\\currentversion\\xx||HKLM\\software\\microsoft\\windows nt\\currentversion\\yy||HKLM\\software\\wow6432node\\zz",key_path=split(key_path,"||") | mvexpand key_path | table sourcetype key_path count] | stats sum(count) as count by sourcetype key_path </CODE></PRE> Thu, 10 Oct 2019 06:03:12 GMT https://community.splunk.com/t5/Splunk-Search/help-on-if-condition-for-results-0/m-p/494749#M194536 kamlesh_vaghela 2019-10-10T06:03:12Z https://community.splunk.com/t5/Splunk-Search/help-on-if-condition-for-results-0/m-p/494750#M194537 <P>hi its perfect thanks!</P> Thu, 10 Oct 2019 06:15:50 GMT https://community.splunk.com/t5/Splunk-Search/help-on-if-condition-for-results-0/m-p/494750#M194537 jip31 2019-10-10T06:15:50Z https://community.splunk.com/t5/Splunk-Search/help-on-if-condition-for-results-0/m-p/494751#M194538 <P>Great @jip31. Can you please upvote and accept this answer to close this question?</P> Thu, 10 Oct 2019 06:18:14 GMT https://community.splunk.com/t5/Splunk-Search/help-on-if-condition-for-results-0/m-p/494751#M194538 kamlesh_vaghela 2019-10-10T06:18:14Z