Splunk Search

in my case various null rows are there i display only the rows where value is coming

arihant16cse
Path Finder

index="_internal" | table wallclock_ms_total,method,status

in the above case null value is coming remove the rows

Tags (1)
0 Karma
1 Solution

arihant16cse
Path Finder

in this case first write your query then use isnotnull function.

index="_internal" | table wallclock_ms_total,method,status | where isnotnull(wallclock_ms_total)

View solution in original post

0 Karma

arihant16cse
Path Finder

in this case first write your query then use isnotnull function.

index="_internal" | table wallclock_ms_total,method,status | where isnotnull(wallclock_ms_total)

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...