Splunk Search

Is there any way to use another function as fillnull to fill null spaces?

KalebeRS
Explorer

Hello.

I have a table with a column for Releases, in this case, a bunch of them does not have releases. I used the fillnull function in this specific field, but it's not working. In this table I have other columns that I have null values as well, but for the other ones the fillnull worked. How can I do the same for the releases field?

 

 

 

 

KalebeRS_0-1689329803905.png

 

0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

Null is not the same as an empty string - perhaps your Releases field has an empty string or is just spaces - try something like this

| eval Release=if(trim(Release)="","No release available",Release)

 

View solution in original post

ITWhisperer
SplunkTrust
SplunkTrust

Null is not the same as an empty string - perhaps your Releases field has an empty string or is just spaces - try something like this

| eval Release=if(trim(Release)="","No release available",Release)

 

Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...