Dashboards & Visualizations

How can i display in the Table to "No Event" with Title. When it has no results.

joy76
Path Finder

Splunk 4.3

Search :
index=server1 | table processName porcessCount

result A : search has a results.

processName  processCount
java          14
vi            2

result B : search has no results.

No results found, inspector...

How can i display it below...

processName  processCount
No Process    

Thanks.

Tags (2)
0 Karma

MuS
SplunkTrust
SplunkTrust

Hi joy76,

Take a look at this answer http://answers.splunk.com/answers/176466/how-to-use-eval-if-there-is-no-result-from-the-bas.html

Hope this helps ...

cheers, MuS

0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...