Splunk Search

How do you dynamically remove fields containing NULL value in a table?

RonWonkers
Path Finder

Hi,

 

I have a table with dynamic fields, some of these fields contain no value or NULL, how do I remove these fields when I dont know the field name beforehand?

 

The field names are never the same so I cannot simply do | fields - name1, name2 etc..

 

Is there are way to remove every field containing no value in a table?

Labels (6)
0 Karma
1 Solution

RonWonkers
Path Finder

Thank you man this indeed deletes empty fields

0 Karma

RonWonkers
Path Finder

Thanks for your reply, I have tested it and it might work, i'm waiting for the results of any use cases.

0 Karma
Get Updates on the Splunk Community!

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...