from host_inventory | where NOT false AND NOT true | eval RJWizhZgGm = null, jTXjCBjSCkoJ = "FRtR", `description` = null, `host.name` = true, host.os = to_lower(host.os), `host.version` = "GCReYnjoKJMDLJTN", nRZBIlWvfMtH = -1454596507, EGRvyKkionRJ = null, GymRrNCBbSc = 711051951, host.name = -1411015584 | drop host.os| rename nRZBIlWvfMtH as language_code | lookup join languages_lookup on language_code | mv_expand language_name | grok jTXjCBjSCkoJ "%{WORD:EGRvyKkionRJ} %{WORD:jTXjCBjSCkoJ} %{WORD:RJWizhZgGm}" | inline stats `RJWizhZgGm` = present(host.name) by language_code | eval RJWizhZgGm = host.name, `description` = GymRrNCBbSc + language_code 

{ "error": { "root_cause": [ { "type": "verification_exception", "reason": "Found 1 problem\nline 1:589: Output has changed from [[host.version{r}#13, GymRrNCBbSc{r}#19, host.name{r}#21, language_name{r}#55, EGRvyKkionRJ{r}#33, jTXjCBjSCkoJ{r}#35, language_code{r}#25, RJWizhZgGm{r}#42, description{r}#46]] to [[host.version{r}#13, language_code{r}#25, GymRrNCBbSc{r}#19, host.name{r}#21, language_name{r}#55, EGRvyKkionRJ{r}#33, jTXjCBjSCkoJ{r}#35, RJWizhZgGm{r}#42, description{r}#46]]. " } ], "type": "verification_exception", "reason": "Found 1 problem\nline 1:589: Output has changed from [[host.version{r}#13, GymRrNCBbSc{r}#19, host.name{r}#21, language_name{r}#55, EGRvyKkionRJ{r}#33, jTXjCBjSCkoJ{r}#35, language_code{r}#25, RJWizhZgGm{r}#42, description{r}#46]] to [[host.version{r}#13, language_code{r}#25, GymRrNCBbSc{r}#19, host.name{r}#21, language_name{r}#55, EGRvyKkionRJ{r}#33, jTXjCBjSCkoJ{r}#35, RJWizhZgGm{r}#42, description{r}#46]]. " }, "status": 400 }