https://community.splunk.com/t5/Splunk-Search/How-to-Remove-Rows-With-quot-NULL-quot/m-p/593496#M206565 <P>Greetings Splunk Community,</P> <P>I am currently working on a search and I am trying to drop rows that have "NULL" in them. The problem I am running into is that some of my rows with "NULL" have things like "nullnullNULL" or "nullNULL".&nbsp; Is there a way i can remove the any row that has the "NULL" value regardless of other info in it?</P> <P>Thanks in advance!</P> Tue, 12 Apr 2022 20:00:10 GMT jpfrancetic 2022-04-12T20:00:10Z https://community.splunk.com/t5/Splunk-Search/How-to-Remove-Rows-With-quot-NULL-quot/m-p/593496#M206565 <P>Greetings Splunk Community,</P> <P>I am currently working on a search and I am trying to drop rows that have "NULL" in them. The problem I am running into is that some of my rows with "NULL" have things like "nullnullNULL" or "nullNULL".&nbsp; Is there a way i can remove the any row that has the "NULL" value regardless of other info in it?</P> <P>Thanks in advance!</P> Tue, 12 Apr 2022 20:00:10 GMT https://community.splunk.com/t5/Splunk-Search/How-to-Remove-Rows-With-quot-NULL-quot/m-p/593496#M206565 jpfrancetic 2022-04-12T20:00:10Z https://community.splunk.com/t5/Splunk-Search/How-to-Remove-Rows-With-quot-NULL-quot/m-p/593500#M206567 <P>If you want to exclude all events that have the string NULL (case sensitive) anywhere in them, do</P><PRE>| regex _raw!="NULL"</PRE><P>You can also match against single fields</P> Tue, 12 Apr 2022 20:10:22 GMT https://community.splunk.com/t5/Splunk-Search/How-to-Remove-Rows-With-quot-NULL-quot/m-p/593500#M206567 PickleRick 2022-04-12T20:10:22Z