# Elasticsearch filter - fields array

**URL:** <https://discuss.elastic.co/t/elasticsearch-filter-fields-array/111435>\
**Category:** Logstash\
**Created:** [December 12, 2017, 9:00pm UTC](https://discuss.elastic.co/t/elasticsearch-filter-fields-array/111435 "2017-12-12T21:00:52Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![chetan\_vartak](https://avatars.discourse-cdn.com/v4/letter/c/fbc32d/32.png) [@chetan\_vartak](https://discuss.elastic.co/u/chetan_vartak)\
**Post date:** [December 12, 2017, 9:00pm UTC](https://discuss.elastic.co/t/elasticsearch-filter-fields-array/111435/1 "2017-12-12T21:00:52Z")

</div>

Hi,

I've this script... It works fine with one field in elasticsearch filter. But starts giving error with multiple fields. How to pass fields array

elasticsearch {  
hosts =\> ["localhost:3602"]  
sort =\> "eid:desc"  
index =\> "master\_idx"  
query =\> "\_type:enterprise-item AND my\_item\_id:%{[my\_item\_id]}"  
fields =\> [{"eid" =\> "eid"}, {"pos\_item\_id" =\> "pos\_item\_id"}]  
fields =\> {"eid" =\> "eid"} " ---- this works --- "  
}

Getting error -  
[2017-12-12T12:59:49,784][WARN][logstash.filters.elasticsearch] Failed to query elasticsearch for previous event {:index=\>"dev\_chetan\_master", :query=\>"\_type:enterprise-item AND my\_item\_id:J25164000001000", :event=\>%{host} %{message}, :error=\>#\<TypeError: can't convert nil into String\>}

---

<div class="post-metadata">

**Author:** ![chetan\_vartak](https://avatars.discourse-cdn.com/v4/letter/c/fbc32d/32.png) [@chetan\_vartak](https://discuss.elastic.co/u/chetan_vartak)\
**Post date:** [December 12, 2017, 11:09pm UTC](https://discuss.elastic.co/t/elasticsearch-filter-fields-array/111435/2 "2017-12-12T23:09:31Z")

</div>

Got it...

elasticsearch {  
hosts =\> ["localhost:3602"]  
sort =\> "eid:desc"  
index =\> "master\_idx"  
query =\> "\_type:enterprise-item AND my\_item\_id:%{[my\_item\_id]}"  
fields =\> {"pos\_item\_id" =\> "pos\_item\_id"}  
fields =\> {"eid" =\> "eid"}   
}

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 9, 2018, 11:09pm UTC](https://discuss.elastic.co/t/elasticsearch-filter-fields-array/111435/3 "2018-01-09T23:09:32Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.