I am trying to use fillnull_value with Tstats like it is stated in the documentation, but it is not working as desired as it's not giving null values.
| tstats summariesonly=true allow_old_summaries=true fillnull_value="NULL" count FROM datamodel=Linux_System.Linux_System WHERE (Linux_System.src_host=*) by src_host
