Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to display "0" instead of "No Results Found"

$
0
0
Hi guys! I have the below query for a Single Value Dashboard Panel. It is counting the daily total error duration of the system. My problem with this is, when there is no error, it displays "No Results Found" instead of "00:00:00" or "0". How can I fix this? | stats sum(DURATION) AS "DURATION" | eval secs=DURATION%60,mins=floor((DURATION/60)%60),hrs=floor((DURATION/3600)%60) | eval HOURS=if(len(hrs)=1,"0".tostring(hrs), tostring(hrs)),MINUTES=if(len(mins)=1,"0".tostring(mins), tostring(mins)),SECONDS=if(len(secs)=1,"0".tostring(secs), tostring(secs)) | eval Time=HOURS.":".MINUTES.":".SECONDS | fields + Time

Viewing all articles
Browse latest Browse all 47296


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>