<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Getting null in output in Cortex XSOAR Discussions</title>
    <link>https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/getting-null-in-output/m-p/564043#M2797</link>
    <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/287891"&gt;@gyldz&lt;/a&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I just checked in the context data and I can see null value in Splunk Result. However when I executed the query in splunk no null value was there.&lt;BR /&gt;Is there any way how to remove this null value?&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Himangi_1-1698914504280.png" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/54876i3887DE183CBB2184/image-size/medium/is-moderation-mode/true?v=v2&amp;amp;px=400" role="button" title="Himangi_1-1698914504280.png" alt="Himangi_1-1698914504280.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Thu, 02 Nov 2023 08:44:08 GMT</pubDate>
    <dc:creator>Himangi</dc:creator>
    <dc:date>2023-11-02T08:44:08Z</dc:date>
    <item>
      <title>Getting null in output</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/getting-null-in-output/m-p/563844#M2791</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I am using a splunk search automation and passing a query in input and I am getting appropriate result without any null value. So I have added a new task after that to convert the output in csv, I am using Exporttocsv automation, but here the input value is consisting of null followed by the result of splunk search because of which I am getting below error&lt;/P&gt;
&lt;P&gt;Can anyone please assist what am I missing..&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Himangi_1-1698821557749.png" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/54807iFE487F23F8B7BD49/image-size/medium/is-moderation-mode/true?v=v2&amp;amp;px=400" role="button" title="Himangi_1-1698821557749.png" alt="Himangi_1-1698821557749.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Himangi_0-1698821510351.png" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/54806i0CDA8ED77D41D552/image-size/medium/is-moderation-mode/true?v=v2&amp;amp;px=400" role="button" title="Himangi_0-1698821510351.png" alt="Himangi_0-1698821510351.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 01 Nov 2023 06:54:42 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/getting-null-in-output/m-p/563844#M2791</guid>
      <dc:creator>Himangi</dc:creator>
      <dc:date>2023-11-01T06:54:42Z</dc:date>
    </item>
    <item>
      <title>Re: Getting null in output</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/getting-null-in-output/m-p/563892#M2792</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/272488"&gt;@Himangi&lt;/a&gt;&amp;nbsp;,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Are you sure that Splunk returns some result which is not null? Can you please see the content for ${Splunk.Result}?&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="gyldz_0-1698846056330.png" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/54815iAE1FDB0ADE7EEF79/image-size/medium/is-moderation-mode/true?v=v2&amp;amp;px=400" role="button" title="gyldz_0-1698846056330.png" alt="gyldz_0-1698846056330.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 01 Nov 2023 13:41:12 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/getting-null-in-output/m-p/563892#M2792</guid>
      <dc:creator>gyldz</dc:creator>
      <dc:date>2023-11-01T13:41:12Z</dc:date>
    </item>
    <item>
      <title>Re: Getting null in output</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/getting-null-in-output/m-p/564043#M2797</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/287891"&gt;@gyldz&lt;/a&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I just checked in the context data and I can see null value in Splunk Result. However when I executed the query in splunk no null value was there.&lt;BR /&gt;Is there any way how to remove this null value?&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Himangi_1-1698914504280.png" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/54876i3887DE183CBB2184/image-size/medium/is-moderation-mode/true?v=v2&amp;amp;px=400" role="button" title="Himangi_1-1698914504280.png" alt="Himangi_1-1698914504280.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 02 Nov 2023 08:44:08 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/getting-null-in-output/m-p/564043#M2797</guid>
      <dc:creator>Himangi</dc:creator>
      <dc:date>2023-11-02T08:44:08Z</dc:date>
    </item>
  </channel>
</rss>

