Splunk Coalesce

Merging Data Fields with Splunk Coalesce Command splunk coalesce coalesce Returns the first value that is not null coalesce, url_decode, url_decode('https%3a%2f coalesce synonyms The COALESCE function takes two or more compatible arguments and returns the first argument that is not null

coalesce db2 Splunk detection rules to Microsoft Sentinel built-in rules Returns the first value that isn't null coalesce(null(), Returned val, null())