Dashboards & Visualizations

Single Condition to use in dashboard to plot a graph in both situations if value>=1 or value=0

dkdeepshikhaa
Explorer

Currently, i am getting graph if value >=1 but if value is 0 than dashboard gives No result found on screen, is it possible to plot it on X-axis (like overlapping )showing value 0

Tags (2)
0 Karma

adonio
Ultra Champion

many answers in this portal for this question, here are couple that i think you will find useful:
also try ... your search ... | timechart ... | fillnull value=0 <your_field>

https://answers.splunk.com/answers/608870/how-to-display-0-instead-of-no-results-found.html
https://answers.splunk.com/answers/582253/replacing-no-results-found-with-0.html
https://answers.splunk.com/answers/336907/return-0-if-search-returns-no-results-found.html

0 Karma

dkdeepshikhaa
Explorer

Thank you @adonio, i looked for the answer on the portal, they are for printing the value, i need to plot it

below is query , i am getting result if positive value is there but if no value than " no result found" message on the screen

index=*...........
| eval success1=if(success="true", 1, 0)
| eval fail1=if(success="false", 1, 0)
| stats sum(success1) as SC, sum(fail1) as FC by field...........
| eval total1=SCount+FCount
| timechart sum(total1) as Total sum(SC) as Success sum(FC) as Fail

||fillnull value=0
| eval "percentage"

if i could get some idea on what to modify in this to get required result

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...