How to set an alert for a search if the stats count=0?

[bfilippi]

Hi

I am counting events and want to raise an alert if it is equal to zero

source="ES.csv"  index="mdata" sourcetype="csv" | stats count

I would like it to raise an alert if stats count = 0

how do I do this?

Thanks

[jeffland · Accepted solution]

It's easier than that. Do the search

source="ES.csv" index="mdata" sourcetype="csv"

and set the alerting options to alert you when it does not return results.

[bfilippi]

thanks, I will try it. As you said, very straightforward!