https://community.splunk.com/t5/Splunk-Search/showing-null-values-in-a-lookup-table/m-p/104557#M27106 <P>I have lines in multiple lookup tables that look like</P> <P>lista,listb,listc,listd<BR /> a1,,c1,d1<BR /> ,,b2,c2,d2<BR /> a3,b3,c3,d3</P> <P>when i do a lookup on these and try to show all of the results it just eats up the lines in the table so i see</P> <P>a1,b2,c1,d1<BR /> a3,b3,c2,d2<BR /> empty,empty,c3,d3</P> <P>is there a way to configure lookup tables to populate a value even if there is nothing there?</P> Tue, 23 Apr 2013 19:40:19 GMT rdevine 2013-04-23T19:40:19Z https://community.splunk.com/t5/Splunk-Search/showing-null-values-in-a-lookup-table/m-p/104557#M27106 <P>I have lines in multiple lookup tables that look like</P> <P>lista,listb,listc,listd<BR /> a1,,c1,d1<BR /> ,,b2,c2,d2<BR /> a3,b3,c3,d3</P> <P>when i do a lookup on these and try to show all of the results it just eats up the lines in the table so i see</P> <P>a1,b2,c1,d1<BR /> a3,b3,c2,d2<BR /> empty,empty,c3,d3</P> <P>is there a way to configure lookup tables to populate a value even if there is nothing there?</P> Tue, 23 Apr 2013 19:40:19 GMT https://community.splunk.com/t5/Splunk-Search/showing-null-values-in-a-lookup-table/m-p/104557#M27106 rdevine 2013-04-23T19:40:19Z https://community.splunk.com/t5/Splunk-Search/showing-null-values-in-a-lookup-table/m-p/104558#M27107 <P>Hi,</P> <P>Yes, you can use the "fillnull"command like:</P> <P><SEARCH>|<YOUR lookup="">| fillnull value="empty"</YOUR></SEARCH></P> <P>the output should now show:<BR /> a1,empty,c1,d1 <BR /> empty,b2,c2,d2 <BR /> a3,b3,c3,d3</P> <P>Hope it helps.</P> Tue, 16 Jul 2013 04:32:05 GMT https://community.splunk.com/t5/Splunk-Search/showing-null-values-in-a-lookup-table/m-p/104558#M27107 gvhees 2013-07-16T04:32:05Z