Splunk Search

in my case various null rows are there i display only the rows where value is coming

arihant16cse
Path Finder

index="_internal" | table wallclock_ms_total,method,status

in the above case null value is coming remove the rows

Tags (1)
0 Karma
1 Solution

arihant16cse
Path Finder

in this case first write your query then use isnotnull function.

index="_internal" | table wallclock_ms_total,method,status | where isnotnull(wallclock_ms_total)

View solution in original post

0 Karma

arihant16cse
Path Finder

in this case first write your query then use isnotnull function.

index="_internal" | table wallclock_ms_total,method,status | where isnotnull(wallclock_ms_total)

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...