Posted on 21st July 2024|379 views
Differentiate between ‘usenull’ and ‘fillnull’ commands in Splunk?
Posted on 21st July 2024| views
Usenull:
usenull is utilised in charting commands similar timechart else chart for a while you require a series designed for events that do not possess that split-by field.
Fillnull:
fillnull fills entire null values within the results of a particular field/fields/all fields with a value.