Hi,
I am combining fields using strcat as shows below and I want to have "N/A" in the same field if result of strcat is Null. But for some reason, isnull or isnotnull command used after strcat is not identifying null values.
Am I missing something here ?
|strcat Key_1 Key_2 Key_3 Key_4 Testing_Key
|eval Testing_Key=if(isnotnull(Testing_Key),Testing_Key,"N/A")
Result should be either value of Testing_Key when its not null and it should "N/A" when Testing_Key is Null.
Thanks,
Rohan Kinhikar
I suspect that strcat creates an empty string rather than a null field. You can verify/workaround that using
|strcat Key_1 Key_2 Key_3 Key_4 Testing_Key
|eval Testing_Key=if(Testing_Key=="","N/A",Testing_Key)