Answer by warren for Splunk Alert when no events/ zero count of events

Most likely, this is not a search problem, it’s an Alert config change needed

Edit your Alert actions thusly:

from User warren – Stack Overflow https://stackoverflow.com/questions/75527983/splunk-alert-when-no-events-zero-count-of-events/75534864#75534864
via IFTTT