Querying a log set for counts of events per log, including those with 0 in the output

InsightIDR Log Search
1

Hi,

Is it possible to query a log set to return a count of events and make sure any logs with no events are included in the results with a 0 count?

For example, we want to see how many Account Lockouts occur per AD event source in the last 24 hours, including AD event sources where there have been none.

Thanks