Field value not assigned

Splunk Search

I would like to search when a field value is not populated. I extracted data for a field but the pattern changes and I may have missed some cases.

This should get you what you need:

MySearch NOT myField=*

Get Updates on the Splunk Community!

Building on the foundation established in our initial Value Insights releases, we are introducing the Savings ...

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...

Join the Conversation