<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Eliminating empty records from display in Reporting</title>
    <link>https://community.splunk.com/t5/Reporting/Eliminating-empty-records-from-display/m-p/122058#M2723</link>
    <description>&lt;P&gt;Can you post your current search query?&lt;/P&gt;</description>
    <pubDate>Mon, 07 Apr 2014 14:50:57 GMT</pubDate>
    <dc:creator>somesoni2</dc:creator>
    <dc:date>2014-04-07T14:50:57Z</dc:date>
    <item>
      <title>Eliminating empty records from display</title>
      <link>https://community.splunk.com/t5/Reporting/Eliminating-empty-records-from-display/m-p/122056#M2721</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;I have a report displayed in table format .The search query currently includes and displays  the records that have all the fields conatining null values in it.There is a requirement to eliminate the records that has the fields containing no values in it. For Example &lt;/P&gt;

&lt;P&gt;Filename    user  server............service&lt;BR /&gt;
1)&lt;BR /&gt;
2)   abbc       ftyfe   reg.............ferwe&lt;/P&gt;

&lt;P&gt;In the above report record 1) should be eliminated from display .Is there any way to do it.Please advise.&lt;/P&gt;</description>
      <pubDate>Mon, 07 Apr 2014 14:40:54 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/Eliminating-empty-records-from-display/m-p/122056#M2721</guid>
      <dc:creator>Jananee_iNautix</dc:creator>
      <dc:date>2014-04-07T14:40:54Z</dc:date>
    </item>
    <item>
      <title>Re: Eliminating empty records from display</title>
      <link>https://community.splunk.com/t5/Reporting/Eliminating-empty-records-from-display/m-p/122057#M2722</link>
      <description>&lt;P&gt;Try &lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;source=test Filename!=""|table *
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;or&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;source=test NOT isnull(Filename)|table *
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Thanks&lt;/P&gt;</description>
      <pubDate>Mon, 07 Apr 2014 14:42:42 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/Eliminating-empty-records-from-display/m-p/122057#M2722</guid>
      <dc:creator>linu1988</dc:creator>
      <dc:date>2014-04-07T14:42:42Z</dc:date>
    </item>
    <item>
      <title>Re: Eliminating empty records from display</title>
      <link>https://community.splunk.com/t5/Reporting/Eliminating-empty-records-from-display/m-p/122058#M2723</link>
      <description>&lt;P&gt;Can you post your current search query?&lt;/P&gt;</description>
      <pubDate>Mon, 07 Apr 2014 14:50:57 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/Eliminating-empty-records-from-display/m-p/122058#M2723</guid>
      <dc:creator>somesoni2</dc:creator>
      <dc:date>2014-04-07T14:50:57Z</dc:date>
    </item>
  </channel>
</rss>

