I need to group by a field where all possible values should be shown in the result. For example, the below snippet groups by interface, but rows can be omitted if the query does not return results for an interface. <search> | stats count(state='success') as count by interface  For example, three interfaces exist. [A, B, C]. The search has no results for C. Output interface      count A              100 B              200 Missing Record C              0 How can any missing records be included?  Any option where a lookup table is not used? ... View more