https://community.splunk.com/t5/Splunk-Search/stats-min-count-not-0-if-value-never-occurs/m-p/301769#M90863 <P>try this:</P> <PRE><CODE>foo | timechart span=60s count | stats min(count) as minCntFoo | appendpipe [ stats count | eval minCntFoo=0 | where count==0 |table minCntFoo] </CODE></PRE> <P>the appendpipe stats command will count the number of events that come back and only bring back results if there are 0 events from the base query.</P> Fri, 25 Aug 2017 17:47:39 GMT cmerriman 2017-08-25T17:47:39Z https://community.splunk.com/t5/Splunk-Search/stats-min-count-not-0-if-value-never-occurs/m-p/301768#M90862 <P>If I have the following query </P> <PRE><CODE>foo | timechart span=60s count | stats min(count) as minCntFoo </CODE></PRE> <P>but foo never occurs, is there a way of setting minCntFoo=0 instead of now, where I get "No results found."?</P> Fri, 25 Aug 2017 17:40:40 GMT https://community.splunk.com/t5/Splunk-Search/stats-min-count-not-0-if-value-never-occurs/m-p/301768#M90862 viggor 2017-08-25T17:40:40Z https://community.splunk.com/t5/Splunk-Search/stats-min-count-not-0-if-value-never-occurs/m-p/301769#M90863 <P>try this:</P> <PRE><CODE>foo | timechart span=60s count | stats min(count) as minCntFoo | appendpipe [ stats count | eval minCntFoo=0 | where count==0 |table minCntFoo] </CODE></PRE> <P>the appendpipe stats command will count the number of events that come back and only bring back results if there are 0 events from the base query.</P> Fri, 25 Aug 2017 17:47:39 GMT https://community.splunk.com/t5/Splunk-Search/stats-min-count-not-0-if-value-never-occurs/m-p/301769#M90863 cmerriman 2017-08-25T17:47:39Z