https://community.splunk.com/t5/Splunk-Search/splunk/m-p/676024#M231252 <P>lets say i have a query which is giving no result at present date but may give in future .&nbsp;<BR />In this query I have calculated timeval = strftime(_time,"%y-%m-%d")&nbsp; , since there is not data coming so "_time" will be empty hence timeval does not give any result . But still I have to show timeval with the help of present time , how can i do that .<BR />&nbsp;i also used at the end of query appendpipe[stats count| where count==0<BR />&nbsp;eval timeval=strftime(now(),%d/%m/%Y) | where count==0] but still no result.</P> Wed, 31 Jan 2024 09:11:32 GMT Siddharthnegi 2024-01-31T09:11:32Z https://community.splunk.com/t5/Splunk-Search/splunk/m-p/676024#M231252 <P>lets say i have a query which is giving no result at present date but may give in future .&nbsp;<BR />In this query I have calculated timeval = strftime(_time,"%y-%m-%d")&nbsp; , since there is not data coming so "_time" will be empty hence timeval does not give any result . But still I have to show timeval with the help of present time , how can i do that .<BR />&nbsp;i also used at the end of query appendpipe[stats count| where count==0<BR />&nbsp;eval timeval=strftime(now(),%d/%m/%Y) | where count==0] but still no result.</P> Wed, 31 Jan 2024 09:11:32 GMT https://community.splunk.com/t5/Splunk-Search/splunk/m-p/676024#M231252 Siddharthnegi 2024-01-31T09:11:32Z https://community.splunk.com/t5/Splunk-Search/splunk/m-p/676028#M231254 <P>Your time format string should be in double quotes</P><LI-CODE lang="markup">| makeresults | where false() | appendpipe [stats count | where count=0 | eval timeval=strftime(now(), "%d/%m/%Y") | where count = 0]</LI-CODE> Wed, 31 Jan 2024 09:26:03 GMT https://community.splunk.com/t5/Splunk-Search/splunk/m-p/676028#M231254 ITWhisperer 2024-01-31T09:26:03Z https://community.splunk.com/t5/Splunk-Search/splunk/m-p/676029#M231255 <P>sorry , I have put them in double inverted commas , still no results</P> Wed, 31 Jan 2024 09:30:43 GMT https://community.splunk.com/t5/Splunk-Search/splunk/m-p/676029#M231255 Siddharthnegi 2024-01-31T09:30:43Z https://community.splunk.com/t5/Splunk-Search/splunk/m-p/676030#M231256 <P>If you run the code snippet I shared, you should see results i.e. it works. This seems to imply that there is something else going on in your search which is causing you to have no results. Please share your full search in a code block &lt;/&gt;</P> Wed, 31 Jan 2024 09:51:13 GMT https://community.splunk.com/t5/Splunk-Search/splunk/m-p/676030#M231256 ITWhisperer 2024-01-31T09:51:13Z