All Apps and Add-ons

To display fields stating "file missing" in Splunk DB query output

prajwal_94
Explorer

Hi 

Could someone help to let me know how to display fields stating "file is missing" in Splunk DB query output when no output is expected

Currently the below query returns-

| dbxquery query=" select * from ............................ ;"
connection="to_connect"

> No results found

Expected output-
file missing   file missing    file missing
(if possible ...different texts in different columns, not sure if eval/fillnull command can be used here)

Labels (1)
0 Karma

prajwal_94
Explorer

Hi Team,

Could someone please help here

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!