https://community.splunk.com/t5/Splunk-Search/stats-command-to-get-count-of-NULL-values/m-p/181291#M52270 <P>In your search use the fillnull command and assign a value to that field when it is null, then count that value for the field.</P> <P><CODE>search issue="*" | fillnull value=null issue | stats count by issue</CODE></P> Tue, 17 Dec 2013 15:51:02 GMT lukejadamec 2013-12-17T15:51:02Z https://community.splunk.com/t5/Splunk-Search/stats-command-to-get-count-of-NULL-values/m-p/181290#M52269 <P>I am using a DB query to get stats count of some data from 'ISSUE' column. This column also has a lot of entries which has no value in it.</P> <P>something like,</P> <H2>ISSUE</H2> <P>Event log alert</P> <P>Skipped count</P> <P>how do i get the NULL value (which is in between the two entries also as part of the stats count. Is there any way?</P> Tue, 17 Dec 2013 15:08:16 GMT https://community.splunk.com/t5/Splunk-Search/stats-command-to-get-count-of-NULL-values/m-p/181290#M52269 anoopambli 2013-12-17T15:08:16Z https://community.splunk.com/t5/Splunk-Search/stats-command-to-get-count-of-NULL-values/m-p/181291#M52270 <P>In your search use the fillnull command and assign a value to that field when it is null, then count that value for the field.</P> <P><CODE>search issue="*" | fillnull value=null issue | stats count by issue</CODE></P> Tue, 17 Dec 2013 15:51:02 GMT https://community.splunk.com/t5/Splunk-Search/stats-command-to-get-count-of-NULL-values/m-p/181291#M52270 lukejadamec 2013-12-17T15:51:02Z https://community.splunk.com/t5/Splunk-Search/stats-command-to-get-count-of-NULL-values/m-p/181292#M52271 <P>awesome, that fixed it <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span> thanks a lot.</P> Tue, 17 Dec 2013 15:52:31 GMT https://community.splunk.com/t5/Splunk-Search/stats-command-to-get-count-of-NULL-values/m-p/181292#M52271 anoopambli 2013-12-17T15:52:31Z https://community.splunk.com/t5/Splunk-Search/stats-command-to-get-count-of-NULL-values/m-p/533219#M150660 <P>Is there a way to rename the NULL to display something else?</P><P>&nbsp;</P> Tue, 15 Dec 2020 18:38:30 GMT https://community.splunk.com/t5/Splunk-Search/stats-command-to-get-count-of-NULL-values/m-p/533219#M150660 JChapp23 2020-12-15T18:38:30Z