Documentation > Splunk > Search Reference > filldown

Search Reference

 


Introduction
Search Overview
Search Reference Overview
Search Commands and Functions
Search Command Reference
Custom Search Commands
Search in the CLI

filldown

Contents

filldown

Synopsis

Replace null values with last non-null value.

Syntax

filldown <wc-field-list>

Description

Replace null values with the last non-null value for a field or set of fields. If no list of fields is given, filldown will be applied to all fields. If there were not any previous values for a field, it will be left blank (NULL).

Examples

Example 1: Filldown null values values for all fields.

... | filldown

Example 2: Filldown null values for the count field only.

... | filldown count

Example 3: Filldown null values for the count field and any field that starts with 'score'.

... | filldown count score*

See also

fillnull

Answers

Have questions? Visit Splunk Answers and see what questions and answers the Splunk community has using the filldown command.

Retrieved from "http://docs.splunk.com/Documentation/Splunk/4.3.2/SearchReference/Filldown"

This documentation applies to the following versions of Splunk: 4.2 , 4.2.1 , 4.2.2 , 4.2.3 , 4.2.4 , 4.2.5 , 4.3 , 4.3.1 , 4.3.2 View the Article History for its revisions.


You must be logged into splunk.com in order to post comments. Log in now.

Was this documentation topic helpful?

If you'd like to hear back from us, please provide your email address:

We'd love to hear what you think about this topic or the documentation as a whole. Feedback you enter here will be delivered to the documentation team.

Feedback submitted, thanks!