how to drop events containing null values coming from a csv using transforms

[learnsplungeek]

Hi 
I am getting some events from a csv which contains the below format and would like to drop such events using transforms. 

null,null,0,null,null,null,null,null,null,  ---- to be dropped
null,null,0,null,null,null,null,null,null,  ---- to be dropped
null,null,0,null,null,null,null,null,null,  ---- to be dropped
null,null,0,null,null,null,null,null,null,  ---- to be dropped
null,null,0,null,null,null,null,null,null,  ---- to be dropped
52376,null,0,test,87387,2984,22,abc,99  ----- to be kept

Below is what i have done so far and is not working

Props.conf
[Reports5min]
TRANSFORMS-null = setnull


transforms.conf
[setnull]
REGEX = ^null,null\,0,null,null,null,null,null,null,$
DEST_KEY = queue
FORMAT = nullQueue

[PickleRick]

1. Where are you putting those configs?

2. Do you use indexed extractions?

[learnsplungeek]

Hi , I have placed both the transforms and props at indexer layer. We are getting the CSV data through UF's

[glc_slash_it]

Assuming the stanza [Reports5min] points to the right sourcetype, try placing a capture group in the regex property, like this:

REGEX = ^(null,null,0,null,null,null,null,null,null,)$

Also are you sure there is ni blacnk spaces at the end of each line?

The rest of the settinggs seems fine.

[learnsplungeek]

I tried the regex and it did not work 😞

[learnsplungeek]

Hi , Sure let me try this regex and see. Yes there are no blank spaces after each line containing null values

[learnsplungeek]

Hi @woodcock @niketn 

Please help me here