@niketnilay Thanks a lot. That was a perfect solution. That's exactly what I was looking for. ... View more

Yes I can hardcode as they are static ... View more

Hello @oscar84x Thank you for the response. I tried | fillnull but it didn't help. Let me try to summarize the scenario if it helps. I have 2 fields, say category and status with 4 possible values. let's say category 1,2,3,4 and status A,B,C,D. Now I would like to count events for each combination of category and status. Like how many events with category=1 and status=A, with category=1 and status=B and so on for all 16 possible combinations. I am using | stats count by Category, Status . Now, If there are no events with Category=2 and status=C, It doesn't show it in the table. I would like to have a 0 value for this combination. I hope I have made it clear. please write back if it isn't clear yet. ... View more

@niketnilay and @DalJeanis I have a similar situation here but unable to implement the solution suggested. I am using | stats count by X, Y at the end of my query. X has 4 possible values and so does Y resulting in 16 different combinations. I need a count of 0 for each combination that doesn't exist I am trying | appendpipe [| stats count by X, Y | where count = 0] to get additional rows with 0 count but it is not working. Can you please tell me what have I misunderstood here? I can post a new question if required. I wrote it as a comment as I thought it is very relevant here. Thanks in advance ... View more