fillnull
Replace null (missing) field values with a specified default.
Syntax
| fillnull [value=<value>] [<field> ...]
Arguments
| Argument | Default | Description |
|---|---|---|
value | 0 | Replacement value |
field | All fields | Specific fields to fill |
Examples
-- Fill all nulls with 0
| fillnull
-- Fill nulls with a specific value
| fillnull value="N/A"
-- Fill specific fields only
| fillnull value=0 duration_ms, bytes_sent
-- After aggregation
| stats count by source, level | fillnull value=0 count
See Also
- eval coalesce() -- Pick first non-null value
- where IS NOT NULL -- Filter out nulls