Good afternoon all,
As a relative noob to Splunk searching, I have a relatively easy (I hope) question.
I have a Splunk box that is dedicated to testing and as such will have periods of no information coming in followed by periods of indexing for tests and then it goes back dormant.
Is there a way to filter out blanks out of results? For example, I have a query that looks at the traffic being indexed--and (huge surprise) there's gaps where no traffic at all was indexed. So it's null or blank or NaN or something. How do I get those records removed from the results?
Thank you in advance!
