This would work just fine. For reference, these are ways you can handle assigning default value, in the order of my personal preference. ...| fillnull value="DefaultValue" fieldname1 fieldname2... ...| eval fieldname1=coalesce(fieldname1,"DefaultValue") ... ...| eval fieldname1=if(isnotnull(fieldname1),fieldname1,"DefaultValue")..... ... View more