we are seeing the same issue on redhat ver 3.10. it looks like the rlog.sh script is not expecting the os to reroute the service call to a 'different' service, so it writes an error. i have contacted the team responsible for development on the unix TA and opened a bug with them.
... View more
you can do this by doing an eval to set null values as 0 should look something like this:
[search terms here] | eval somefield=if(isnotnull(extracted_field), extracted_field, 0) | stat avg(somefield)
... View more