https://community.splunk.com/t5/Splunk-Search/How-to-replace-blank-values-with-quot-0-quot/m-p/480784#M193033 <P>Since you said you tried fillnull, I'm guessing they're being read in as empty strings. For that specific column, you can specifically try</P> <P><CODE>| eval invalid=if(isnull(invalid) OR invalid="", 0, invalid)</CODE><BR /> Otherwise <CODE>fillnull value=0</CODE> should fill any fields that are null. You can also check if the column is actually null or not by doing this:</P> <P><CODE>| eval isInvalidNull=if(isnull(invalid), 1, 0)</CODE><BR /> and compute this column just to validate that theory</P> Wed, 08 Jan 2020 20:38:08 GMT aberkow 2020-01-08T20:38:08Z https://community.splunk.com/t5/Splunk-Search/How-to-replace-blank-values-with-quot-0-quot/m-p/480783#M193032 <P>Trying to replace the blank values on my dashboard with 0s. If table is empty, should display 0. On the logs data, it is simply blank.</P> Wed, 19 Apr 2023 20:59:14 GMT https://community.splunk.com/t5/Splunk-Search/How-to-replace-blank-values-with-quot-0-quot/m-p/480783#M193032 harshparikhxlrd 2023-04-19T20:59:14Z https://community.splunk.com/t5/Splunk-Search/How-to-replace-blank-values-with-quot-0-quot/m-p/480784#M193033 <P>Since you said you tried fillnull, I'm guessing they're being read in as empty strings. For that specific column, you can specifically try</P> <P><CODE>| eval invalid=if(isnull(invalid) OR invalid="", 0, invalid)</CODE><BR /> Otherwise <CODE>fillnull value=0</CODE> should fill any fields that are null. You can also check if the column is actually null or not by doing this:</P> <P><CODE>| eval isInvalidNull=if(isnull(invalid), 1, 0)</CODE><BR /> and compute this column just to validate that theory</P> Wed, 08 Jan 2020 20:38:08 GMT https://community.splunk.com/t5/Splunk-Search/How-to-replace-blank-values-with-quot-0-quot/m-p/480784#M193033 aberkow 2020-01-08T20:38:08Z https://community.splunk.com/t5/Splunk-Search/How-to-replace-blank-values-with-quot-0-quot/m-p/640511#M221935 <BLOCKQUOTE><HR /><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/208970">@aberkow</a>&nbsp;wrote:<P>Otherwise fillnull value=0 should fill any fields that are null.</P><HR /></BLOCKQUOTE><P><BR />Works for me.&nbsp;</P> Wed, 19 Apr 2023 06:11:06 GMT https://community.splunk.com/t5/Splunk-Search/How-to-replace-blank-values-with-quot-0-quot/m-p/640511#M221935 TrangCIC81 2023-04-19T06:11:06Z