Reporting

Eliminating empty records from display

Jananee_iNautix
Path Finder

Hi,

I have a report displayed in table format .The search query currently includes and displays the records that have all the fields conatining null values in it.There is a requirement to eliminate the records that has the fields containing no values in it. For Example

Filename user server............service
1)
2) abbc ftyfe reg.............ferwe

In the above report record 1) should be eliminated from display .Is there any way to do it.Please advise.

Tags (1)
0 Karma

somesoni2
Revered Legend

Can you post your current search query?

0 Karma

linu1988
Champion

Try

source=test Filename!=""|table *

or

source=test NOT isnull(Filename)|table *

Thanks

0 Karma
Get Updates on the Splunk Community!

CX Day is Coming!

Customer Experience (CX) Day is on October 7th!! We're so excited to bring back another day full of wonderful ...

Strengthen Your Future: A Look Back at Splunk 10 Innovations and .conf25 Highlights!

The Big One: Splunk 10 is Here!  The moment many of you have been waiting for has arrived! We are thrilled to ...

Now Offering the AI Assistant Usage Dashboard in Cloud Monitoring Console

Today, we’re excited to announce the release of a brand new AI assistant usage dashboard in Cloud Monitoring ...