https://community.splunk.com/t5/Splunk-Search/How-to-detect-and-fill-default-value-to-empty-value-field/m-p/50216#M179555 <P>try piping it with </P> <P>fillnull value=NULL</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/5.0/SearchReference/fillnull">http://docs.splunk.com/Documentation/Splunk/5.0/SearchReference/fillnull</A></P> Fri, 30 Nov 2012 11:09:56 GMT aneeshkjm123 2012-11-30T11:09:56Z https://community.splunk.com/t5/Splunk-Search/How-to-detect-and-fill-default-value-to-empty-value-field/m-p/50214#M179553 <P>Hello,</P> <P>When i did a search on my SQL data, there are a lot of empty-value fields, which don't contain anything, i want to fill them up with value "<NULL>" , but i cannot find any efficient method to achieve that.</NULL></P> <P>I tried fillnull function , but it didn't work through. If i do it by hand, like </P> <P>eval field=case(isnull(field),"<NULL>",NOT isnull(field),field)</NULL></P> <P>it works, but if there are nearly 100 fields, it's impossible.</P> <P>So can you suggest me a solution for that ?</P> Fri, 30 Nov 2012 10:27:43 GMT https://community.splunk.com/t5/Splunk-Search/How-to-detect-and-fill-default-value-to-empty-value-field/m-p/50214#M179553 sieutruc 2012-11-30T10:27:43Z https://community.splunk.com/t5/Splunk-Search/How-to-detect-and-fill-default-value-to-empty-value-field/m-p/50215#M179554 <P>What didn't work with fillnull?</P> Fri, 30 Nov 2012 10:40:29 GMT https://community.splunk.com/t5/Splunk-Search/How-to-detect-and-fill-default-value-to-empty-value-field/m-p/50215#M179554 Ayn 2012-11-30T10:40:29Z https://community.splunk.com/t5/Splunk-Search/How-to-detect-and-fill-default-value-to-empty-value-field/m-p/50216#M179555 <P>try piping it with </P> <P>fillnull value=NULL</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/5.0/SearchReference/fillnull">http://docs.splunk.com/Documentation/Splunk/5.0/SearchReference/fillnull</A></P> Fri, 30 Nov 2012 11:09:56 GMT https://community.splunk.com/t5/Splunk-Search/How-to-detect-and-fill-default-value-to-empty-value-field/m-p/50216#M179555 aneeshkjm123 2012-11-30T11:09:56Z https://community.splunk.com/t5/Splunk-Search/How-to-detect-and-fill-default-value-to-empty-value-field/m-p/50217#M179556 <P>as i specified in my question, fillnull value=NULL doesn't work. It only works in case there is at least one value of the field is not empty, but if all the value of that field are empty , it doesn't work</P> Fri, 30 Nov 2012 14:06:06 GMT https://community.splunk.com/t5/Splunk-Search/How-to-detect-and-fill-default-value-to-empty-value-field/m-p/50217#M179556 sieutruc 2012-11-30T14:06:06Z https://community.splunk.com/t5/Splunk-Search/How-to-detect-and-fill-default-value-to-empty-value-field/m-p/50218#M179557 <P>I have the same problem as @sieutruc, posted another question to hopefully get some answers on this.</P> <P><A href="http://answers.splunk.com/answers/279781/showing-all-fields-in-search-including-empty.html?minQuestionBodyLength=80">http://answers.splunk.com/answers/279781/showing-all-fields-in-search-including-empty.html?minQuestionBodyLength=80</A></P> Fri, 17 Jul 2015 14:03:09 GMT https://community.splunk.com/t5/Splunk-Search/How-to-detect-and-fill-default-value-to-empty-value-field/m-p/50218#M179557 djfang 2015-07-17T14:03:09Z