I am extracting these three values and if there is any empty value in any of the fields, it returns as no result.
How i replace the blank values with NA in the rex statements
| rex field=AddtionalData "Business unit:(?<BusinessUnit>[^,]+)"
| rex field=AddtionalData "Location code:(?<Locationcode>[^,]+)"
| rex field=AddtionalData "Job code :(?<Jobcode>[^,]+)"
| stats count by BusinessUnit Locationcode Jobcode
| fields - count
Hi @manojchacko78,
you can use fillnull to replace spaces with "NA"
| rex field=AddtionalData "Business unit:(?<BusinessUnit>[^,]+)"
| rex field=AddtionalData "Location code:(?<Locationcode>[^,]+)"
| rex field=AddtionalData "Job code :(?<Jobcode>[^,]+)"
| fillnull value="NA" BusinessUnit
| fillnull value="NA" Locationcode
| fillnull value="NA" Jobcode
| stats count by BusinessUnit Locationcode Jobcode
| fields - count
Ciao.
Giuseppe
Hi @manojchacko78,
you can use fillnull to replace spaces with "NA"
| rex field=AddtionalData "Business unit:(?<BusinessUnit>[^,]+)"
| rex field=AddtionalData "Location code:(?<Locationcode>[^,]+)"
| rex field=AddtionalData "Job code :(?<Jobcode>[^,]+)"
| fillnull value="NA" BusinessUnit
| fillnull value="NA" Locationcode
| fillnull value="NA" Jobcode
| stats count by BusinessUnit Locationcode Jobcode
| fields - count
Ciao.
Giuseppe