Hello, I have this query:
index=main | table sourcetype, data, context, local_endpoint, remote_endpoint
| eval Ergebnis = replace(data,"^[^\@]+","")
| search Ergebnis=*
I Need to remove the empty rows from Ergebnis field that does not have a value but it does not work!
thanks for Help :)
↧