I am using Splunk 6.3.x and my requirement is to customize default "No result found" message and "N/A" message of single value element.
I checked similar questions here, but no use.
Is there any way to customize these messages through css or through a Splunk search? I want to show "0" in place of "N/A" for single value element.
You can set the default value of the variable which populates single value using eval.
eval res=0| and then your custom conditions
append this to your search -
<your_search> | stats count as message
This should do the trick, if there are no events then it will show "0" else the event count