New comment on reddit

Posted on 2 April 2020

This seems to work on a quick check I just did:

| eval mv=if(isnull(mvcount(mv)),"none",mv)

April 02, 2020 at 10:46AM
via reddit https://www.reddit.com/r/Splunk/comments/ftmh29/filling_values_in_a_possible_mv_field/fm7xj4k?utm_source=ifttt

merikebi