diff --git a/docs/ppl-lang/ppl-fillnull-command.md b/docs/ppl-lang/ppl-fillnull-command.md index 00064849c..f204a5969 100644 --- a/docs/ppl-lang/ppl-fillnull-command.md +++ b/docs/ppl-lang/ppl-fillnull-command.md @@ -17,7 +17,7 @@ The example show fillnull one field. PPL query: - os> source=logs | fields status_code | eval input=status_code | fillnull value = 0 status_code; + os> source=logs | fields status_code | eval input=status_code | fillnull with 0 in status_code; | input | status_code | |-------|-------------| | 403 | 403 | @@ -43,7 +43,7 @@ The example show fillnull applied to multiple fields. PPL query: - os> source=logs | fields request_path, timestamp | eval input_request_path=request_path, input_timestamp = timestamp | fillnull value = '???' request_path, timestamp; + os> source=logs | fields request_path, timestamp | eval input_request_path=request_path, input_timestamp = timestamp | fillnull with '???' in request_path, timestamp; | input_request_path | input_timestamp | request_path | timestamp | |--------------------|-----------------------|--------------|------------------------| | /contact | NULL | /contact | ??? | @@ -89,4 +89,4 @@ PPL query: | /services | NULL | /services | 1970-01-01 00:00:00 | | /home | 2023-10-01 10:45:00 | /home | 2023-10-01 10:45:00 | | /services | 2023-10-01 11:00:00 | /services | 2023-10-01 11:00:00 | -| NULL | 2023-10-01 10:35:00 | /error | 2023-10-01 10:35:00 | \ No newline at end of file +| NULL | 2023-10-01 10:35:00 | /error | 2023-10-01 10:35:00 |