Dashboards & Visualizations

If my search give no results ...show in Single value...If results available... then show in table with values?

priyansplunk
Engager

If my search give no results ..I want to Display Single value chart with "All is Well".If my search query produce results i want to show the table with values..Is it possible?

Tags (2)
0 Karma

woodcock
Esteemed Legend

Just add this to the end of your search:

... | appendpipe [| stats count AS message | eval message=if(message==0, "ALL IS WELL", "There is trouble up above!")]
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...