| makeresults | eval a="1" | append [| makeresults | eval b="2"] | fillnull value="" | stats list(a)
vs.
| makeresults | eval a="1" | append [| makeresults | eval b="2"] | fillnull value="0" | stats list(a)
... shows only one result, even though
| makeresults | eval a="1" | append [| makeresults | eval b="2"] | fillnull value="" | stats list(a) AS z | eval w=mvcount(z) | table w
... counts 2. Isn't this the whole point of using fillnull? What's the most elegant workaround? This seems to be super dangerous and misleading
