Dashboards & Visualizations

DIsplay 0 when no results returned in single value

ipops
Path Finder

I have the following search which parses delimited fields.

sourcetype=ivrdata | eval {message}=varValue | stats first(LogTimestamp) as Time values(Network) as Network values(Phone) as Phone values(Tower) as Tower values(Platform) as Platform values(Province) as Province by IVR_SessionID | WHERE Platform="Test" AND Tower="99" | eval _time=Time | stats count by _time | accum count

I want to display the count as a singlevalue on a dashboard. When the search returns no results, the singlevalue displays "N/A". How can I make this show 0 instead?

I tried adding "fillnull 0" before the stats statement but still does not work. any ideas?

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...