# PPL "fields" command is only showing some results

**URL:** <https://forum.opensearch.org/t/ppl-fields-command-is-only-showing-some-results/19594>\
**Category:** Observability\
**Tags:** discuss, troubleshoot\
**Created:** [May 28, 2024, 2:46pm UTC](https://forum.opensearch.org/t/ppl-fields-command-is-only-showing-some-results/19594 "2024-05-28T14:46:25Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![fergiektid](https://avatars.discourse-cdn.com/v4/letter/f/7ea924/32.png) [@fergiektid](https://forum.opensearch.org/u/fergiektid)\
**Post date:** [May 28, 2024, 2:46pm UTC](https://forum.opensearch.org/t/ppl-fields-command-is-only-showing-some-results/19594/1 "2024-05-28T14:46:25Z")

</div>

**Versions** (relevant - OpenSearch/Dashboard/Server OS/Browser):  
Opensearch v2.14.0

**Describe the issue** :  
It appears that whenever I use the “fields” command in PPL, my query results appear to get filtered. I’ve yet to spot the exact pattern as to how but perhaps it’s a dedup type of thing happening to them. **Can anyone explain why simply piping my query through fields command would result in fewer results?** I can’t see why from the field command documentation. [Commands - OpenSearch Documentation](https://opensearch.org/docs/latest/search-plugins/sql/ppl/functions/#fields)

You can replicate what I’m describing on the opensearch playground. The following query returns 630 hits.

source = opensearch\_dashboards\_sample\_data\_logs | where match(request,‘filebeat’)

where as the following query returns \< 200 results  
source = opensearch\_dashboards\_sample\_data\_logs | where match(request,‘filebeat’) | fields request

**Configuration** :  
([https://playground.opensearch.org/app/observability-logs#/explorer/TMAseY8BhwnwYpCg3bas](https://playground.opensearch.org/app/observability-logs#/explorer/TMAseY8BhwnwYpCg3bas))

**Relevant Logs or Screenshots** :  
One screenshot(due to new poster restrictions)

 ![image](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/a/ab1ba10617ccfe414be3765265f6e6729b85c62d.png)

Thanks!

Ian

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/3/33547ea01a5b12dcca2958411d3edd97ae2ea8c1.png) [@system](https://forum.opensearch.org/u/system)\
**Post date:** [July 27, 2024, 2:47pm UTC](https://forum.opensearch.org/t/ppl-fields-command-is-only-showing-some-results/19594/2 "2024-07-27T14:47:12Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
