All Apps and Add-ons

To display fields stating "file missing" in Splunk DB query output

prajwal_94
Explorer

Hi 

Could someone help to let me know how to display fields stating "file is missing" in Splunk DB query output when no output is expected

Currently the below query returns-

| dbxquery query=" select * from ............................ ;"
connection="to_connect"

> No results found

Expected output-
file missing   file missing    file missing
(if possible ...different texts in different columns, not sure if eval/fillnull command can be used here)

Labels (1)
0 Karma

prajwal_94
Explorer

Hi Team,

Could someone please help here

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...