Hi, I need to display a message for the table and graph if the search results return no results. Any idea how can display custom messages?
base search
| stats sum(source_record) as Source,sum(target_record) as Target by ID
| appendpipe [| stats count as count | where count == 0 | eval target="Custom message"]
| appendpipe
[| stats count as _count
| where _count == 0
| eval message="Custom message"]
Thanks, It's not displaying the message in the table but showing the empty table with all the columns. It is better than the default table icon.
Please share your full search displaying this behaviour