Field value not assigned

Splunk Search

I would like to search when a field value is not populated. I extracted data for a field but the pattern changes and I may have missed some cases.

This should get you what you need:

MySearch NOT myField=*

Get Updates on the Splunk Community!

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...

As software delivery cycles continue to accelerate, observability shouldn’t be a luxury — it should be a ...

Join the Conversation