How to write the logic for below condition?

[santhannerella]

I have a situation where i will get the success message log when there is response, and there won't be any log in case of failure, I need to show a failure message if i don't get any response. Can you please help me with this.

case:success
Name status Msgtype
F1 null request
F1 null request
F1 Success response

Case: failure

Name status Msgtype
F1 null request
F1 null request
F1 failure response

[to4kawa]

https://docs.splunk.com/Documentation/Splunkbase/splunkbase/Answers/Questions#Tips_for_getting_your_...

your search
| appendpipe [|stats count
| eval message="There is no result"
| where count = 0 | table message ]