Splunk Search

How do I remove empty rows in the result fields?

leninkp3005
Explorer

Folks !!

I'm struggling with removing empty rows from the result fields in my results. In my results, i've got many empty rows.

Kindly assist this case.

Unable to upload/attach my sheet, sorry for the inconvenience.

Cheers,
Lenin K

Tags (1)
1 Solution

iamarkaprabha
Contributor

Hi leninkp3005,

You can use field!=null for this one.
If you want to use those null fields you can use fillnull command
fillnull fills all the null values in the results of a specific field/fields/all fields with a value (defaulted as 0)
|fillnull FIELD value="N/A"

View solution in original post

iamarkaprabha
Contributor

Hi leninkp3005,

You can use field!=null for this one.
If you want to use those null fields you can use fillnull command
fillnull fills all the null values in the results of a specific field/fields/all fields with a value (defaulted as 0)
|fillnull FIELD value="N/A"

leninkp3005
Explorer

Hi,
Used that last query. It's working fine.

Thanks.

0 Karma

iamarkaprabha
Contributor

You are welcome!

0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

@leninkp3005

you can use where or search after your result.

|where isnotnull(field1)

OR

|search field1=*

leninkp3005
Explorer

Hello Kamlesh,

It's working for me, thanks for your support.

Cheers,
Lenin Kp

0 Karma
Get Updates on the Splunk Community!

Exporting Splunk Apps

Join us on Monday, October 21 at 11 am PT | 2 pm ET!With the app export functionality, app developers and ...

Cisco Use Cases, ITSI Best Practices, and More New Articles from Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Build Your First SPL2 App!

Watch the recording now!.Do you want to SPL™, too? SPL2, Splunk's next-generation data search and preparation ...