Splunk Search

Is there any way to use another function as fillnull to fill null spaces?

KalebeRS
Explorer

Hello.

I have a table with a column for Releases, in this case, a bunch of them does not have releases. I used the fillnull function in this specific field, but it's not working. In this table I have other columns that I have null values as well, but for the other ones the fillnull worked. How can I do the same for the releases field?

 

 

 

 

KalebeRS_0-1689329803905.png

 

Labels (1)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

Null is not the same as an empty string - perhaps your Releases field has an empty string or is just spaces - try something like this

| eval Release=if(trim(Release)="","No release available",Release)

 

View solution in original post

ITWhisperer
SplunkTrust
SplunkTrust

Null is not the same as an empty string - perhaps your Releases field has an empty string or is just spaces - try something like this

| eval Release=if(trim(Release)="","No release available",Release)

 

Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Get the T-shirt to Prove You Survived Splunk University Bootcamp

As if Splunk University, in Las Vegas, in-person, with three days of bootcamps and labs weren’t enough, now ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...