When I include a KPI in a Beta Glass Table that yields 0 results, it shows 'No Result' and gets rid of the styling.
The search is accurate to return a 0, but I would much rather see 0 than 'No Result'.
Is there a way I can change the KPI to show 0?
host=plbu*hqp* (Method=LoadInspectionReport OR Method=UpdateInspection OR Method=CreateLocusInspectionIfNotExists OR Method=UpdateInspectionDashboardDefaultSettings OR Method=UpdateInspections) sc_status!=200
Search of KPI above, counting results by _time.
Greetings @logankinman99,
I really don't understand how it works, but try this. It works in our environment. From @nagaramsai at this URL: https://answers.splunk.com/answers/336907/return-0-if-search-returns-no-results-found.html
index.... sourcetype..... |appendpipe [stats count | where count==0]
Cheers,
Jacob
I'm not sure how it works either, but it's a great technique for ad hoc searches. That does help with future queries, so thanks!
However, I can't seem to get it to work with KPIs, which I am currently using for the Glass Table visualizations...
Are you able to get these to work with KPIs? Or just the general searches?
Thanks,
Logan