Hi Everyone,
Got a little further.
I made my query have this value.
sc-bytes:*
As the selected query.
from[-1],size[-1]: Parse Failure [Failed to parse source
[{"facets":{"0":{"date_histogram":{"key_field":"@timestamp","value_field":"sc-bytes","interval":"12h"},"global":true,"facet_filter":{"fquery":{"query":{"filtered":{"query":{"query_string":{"query":"sc-bytes:*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"field":{"type":{"query":"cloudfront"}}},"_cache":true}},{"fquery":{"query":{"field":{"PLATFORM":{"query":"\"test_system\""}}},"_cache":true}},{"range":{"@timestamp":{"from":1384772252771,"to":"now"}}},{"fquery":{"query":{"field":{"cs-uri-stem":{"query":"*test*"}}},"_cache":true}}]}}}}}}}},"size":0}]]]
I don't understand this error, can someone help me?
Regards
John
On Wednesday, 18 December 2013 10:46:48 UTC, Johnathan Phan wrote:
>
> Hi everyone,
>
> I have a set of logs in ES from cloudfront. I have a field called
> sc-bytes, I want the total from the btyes for a specific subset of data I
> filter. I have tried the following.
>
> Adding a histogram, setting "Chart Value" to "Total". Then setting the
> "Value field" to "sc-bytes".
>
> I get the following exception.
>
> ClassCastException[org.elasticsearch.index.fielddata.plain.PagedBytesIndexFieldData
>
> cannot be cast to org.elasticsearch.index.fielddata.IndexNumericFieldData]
>
> I have doubel checked this as logstash is setting the value to Number for
> the field sc-bytes. Does anyone know what is wrong here?
>
> Regards
>
> John
>
--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/89fbbcfe-0c3b-4513-b6de-b35ea50cd38f%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.
