I am doing a search in Splunk over a time period (from Jan 25th to present). I expect that no data be present on January 25th or 26th and that the data begin to be present on Jan 27th, but I want the 0 data points to illustrate the absence of traffic.
Every time I perform the search, I only get data from the 27th onward.
Is there a way to force Splunk to show me times when there is even 0 data to show, just to illustrate the point that no data is present?
