I have a situation where i will get the success message log when there is response, and there won't be any log in case of failure, I need to show a failure message if i don't get any response. Can you please help me with this.
case:success
Name status Msgtype
F1 null request
F1 null request
F1 Success response
Case: failure
Name status Msgtype
F1 null request
F1 null request
F1 failure response
your search
| appendpipe [|stats count
| eval message="There is no result"
| where count = 0 | table message ]