index="usbweeklydata" |rex field="srcfilename" (?
above query returns me :
but if I change the keyword to "halla" then it is not matching in the "srcfieldname" field, then it should give me 0 as an output like :
Please help me to get this type of 0 output for non-matching keywords !!
Please help me this time, I have been searching for the solution , but didnt get yet !!
Your help would be highly appreciated !!
Thanks in Advance
Many Many thanks sdaniels for this , this really helped me a lot, I appreciate your help for this and hope to get same assistance in future also. Once again very very thanks 🙂