Show large "0" or other display when table results are 0

[andrewkenth]

I'm interested in showing a large "0" when the search results have no results. The results are in a table format.

somesearch | table col1 col2 col3

Is this possible?

[MuS]

Hi andrewkenth,

Take a look at this answer http://answers.splunk.com/answers/176466/how-to-use-eval-if-there-is-no-result-from-the-bas.html

Hope this helps ...

cheers, MuS

[somesoni2]

Try the solution mentioned here

http://answers.splunk.com/answers/78124/No-results-found%2C-I-want-to-show-other-message%EF%BC%81%EF...