# PPL: no handler found for uri \[/\_plugins/\_ppl\] and method \[POST\], this query is not runnable

**URL:** <https://forum.opensearch.org/t/ppl-no-handler-found-for-uri-plugins-ppl-and-method-post-this-query-is-not-runnable/19006>\
**Category:** OpenSearch Dashboards\
**Tags:** troubleshoot\
**Created:** [April 23, 2024, 4:49pm UTC](https://forum.opensearch.org/t/ppl-no-handler-found-for-uri-plugins-ppl-and-method-post-this-query-is-not-runnable/19006 "2024-04-23T16:49:17Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![search42](https://avatars.discourse-cdn.com/v4/letter/s/91b2a8/32.png) [@search42](https://forum.opensearch.org/u/search42)\
**Post date:** [April 23, 2024, 4:49pm UTC](https://forum.opensearch.org/t/ppl-no-handler-found-for-uri-plugins-ppl-and-method-post-this-query-is-not-runnable/19006/1 "2024-04-23T16:49:17Z")

</div>

**Versions** (relevant - OpenSearch/Dashboard/Server OS/Browser):

OpenSearch / Dashboards 2.13.0

**Describe the issue** :

I am able to review and filter logs just fine in Discover but when I try to use PPL in Logs under Observability I get the following error when I try to execute any query:

```auto
PPL query fetch err: StatusCodeError: no handler found for uri [/_plugins/_ppl] and method [POST]
    at respond (/opensearch/opensearch-dashboards-2.13.0/node_modules/elasticsearch/src/lib/transport.js:349:15)
    at checkRespForFailure (/opensearch/opensearch-dashboards-2.13.0/node_modules/elasticsearch/src/lib/transport.js:306:7)
    at HttpConnector.<anonymous> (/opensearch/opensearch-dashboards-2.13.0/node_modules/elasticsearch/src/lib/connectors/http.js:173:7)
    at IncomingMessage.wrapper (/opensearch/opensearch-dashboards-2.13.0/node_modules/lodash/lodash.js:4991:19)
    at IncomingMessage.emit (node:events:529:35)
    at IncomingMessage.emit (node:domain:489:12)
    at endReadableNT (node:internal/streams/readable:1400:12)
    at processTicksAndRejections (node:internal/process/task_queues:82:21) {
  status: 400,
  displayName: 'BadRequest',
  path: '/_plugins/_ppl',
  query: {},
  body: {
    error: 'no handler found for uri [/_plugins/_ppl] and method [POST]'
  },
  statusCode: 400,
  response: '{"error":"no handler found for uri [/_plugins/_ppl] and method [POST]"}',
  toString: [Function (anonymous)],
  toJSON: [Function (anonymous)]
}

```

**Configuration** :

opensearch.yml

```auto
cluster.name: AcmeLogging
node.name: acme-logging
path.data: /data/persistent
network.host: 0.0.0.0
discovery.seed_hosts: ["acme-logging"]
cluster.initial_master_nodes: ["acme-logging"]

```

opensearch\_dashboards.yml

```auto
server.host: 0.0.0.0

opensearch.hosts: [http://localhost:9200]
server.basePath: "/admin/dashboard"
server.rewriteBasePath: false
opensearch.ssl.verificationMode: none

```

---

<div class="post-metadata">

**Author:** ![gaobinlong](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/gaobinlong/32/5242_2.png) [@gaobinlong](https://forum.opensearch.org/u/gaobinlong)\
**Post date:** [April 24, 2024, 5:34am UTC](https://forum.opensearch.org/t/ppl-no-handler-found-for-uri-plugins-ppl-and-method-post-this-query-is-not-runnable/19006/2 "2024-04-24T05:34:55Z")

</div>

Could you check if the sql plugin is installed in your OpenSearch cluster?

```auto
GET _cat/plugins

```

---

<div class="post-metadata">

**Author:** ![search42](https://avatars.discourse-cdn.com/v4/letter/s/91b2a8/32.png) [@search42](https://forum.opensearch.org/u/search42)\
**Post date:** [April 24, 2024, 3:53pm UTC](https://forum.opensearch.org/t/ppl-no-handler-found-for-uri-plugins-ppl-and-method-post-this-query-is-not-runnable/19006/3 "2024-04-24T15:53:48Z")

</div>

I double checked the Dockerfile that builds our opensearch image and saw that the sql plugin was being removed. That might have been done a while ago due to a security vulnerability. Once I re-added it the Observability tools started working. Thanks for pointing me in the right direction.