Splunk Search

How do I remove empty rows in the result fields?

leninkp3005
Explorer

Folks !!

I'm struggling with removing empty rows from the result fields in my results. In my results, i've got many empty rows.

Kindly assist this case.

Unable to upload/attach my sheet, sorry for the inconvenience.

Cheers,
Lenin K

Tags (1)
1 Solution

iamarkaprabha
Contributor

Hi leninkp3005,

You can use field!=null for this one.
If you want to use those null fields you can use fillnull command
fillnull fills all the null values in the results of a specific field/fields/all fields with a value (defaulted as 0)
|fillnull FIELD value="N/A"

View solution in original post

iamarkaprabha
Contributor

Hi leninkp3005,

You can use field!=null for this one.
If you want to use those null fields you can use fillnull command
fillnull fills all the null values in the results of a specific field/fields/all fields with a value (defaulted as 0)
|fillnull FIELD value="N/A"

leninkp3005
Explorer

Hi,
Used that last query. It's working fine.

Thanks.

0 Karma

iamarkaprabha
Contributor

You are welcome!

0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

@leninkp3005

you can use where or search after your result.

|where isnotnull(field1)

OR

|search field1=*

leninkp3005
Explorer

Hello Kamlesh,

It's working for me, thanks for your support.

Cheers,
Lenin Kp

0 Karma
Get Updates on the Splunk Community!

Credit Card Data Protection & PCI Compliance with Splunk Edge Processor

Organizations handling credit card transactions know that PCI DSS compliance is both critical and complex. The ...

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...