As clarification - we are looking to use curl (as a test) to search for a literal question mark "?". We've tried the "\?" in the following "\?confid" and this also does not work.
suggestions. On Mon, Nov 17, 2014 at 12:34 AM, Bill Shetti <[email protected]> wrote: > I have tried searching for "?confid", I 've tried the following > > [root@node4 logstash]# curl -XGET ' > http://localhost:9200/logstash-2014.11.16/_search?pretty' -d ' > > { > > "query": { > > "filtered":{ > > "filter": { > > "term": { "message":"?confid"} > > } > > } > > } > > }' > > > OUTPUT: > > { > > "took" : 1, > > "timed_out" : false, > > "_shards" : { > > "total" : 5, > > "successful" : 5, > > "failed" : 0 > > }, > > "hits" : { > > "total" : 0, > > "max_score" : null, > > "hits" : [ ] > > } > > } > > Tried the following: > > [root@node4 logstash]# curl -XGET ' > http://localhost:9200/logstash-2014.11.16/_search?pretty' -d ' > > { > > "query": { > > "filtered":{ > > "filter": { > > "term": { "message":"\?confid"} > > } > > } > > } > > }' > > { > > "error" : "SearchPhaseExecutionException[Failed to execute phase > [query], all shards failed; shardFailures > {[Wv1luevnSfCUKjlWZjtKaQ][logstash-2014.11.16][0]: > SearchParseException[[logstash-2014.11.16][0]: from[-1],size[-1]: Parse > Failure [Failed to parse source [\n{\n\"query\": {\n \"filtered\":{\n > \"filter\": {\n \"term\": { \"message\":\"\\?confid\"}\n }\n > }\n }\n}]]]; nested: QueryParsingException[[logstash-2014.11.16] Failed to > parse]; nested: JsonParseException[Unrecognized character escape '?' (code > 63)\n at [Source: [B@6bdb244b; line: 6, column: 31]]; > }{[Wv1luevnSfCUKjlWZjtKaQ][logstash-2014.11.16][1]: > SearchParseException[[logstash-2014.11.16][1]: from[-1],size[-1]: Parse > Failure [Failed to parse source [\n{\n\"query\": {\n \"filtered\":{\n > \"filter\": {\n \"term\": { \"message\":\"\\?confid\"}\n }\n > }\n }\n}]]]; nested: QueryParsingException[[logstash-2014.11.16] Failed to > parse]; nested: JsonParseException[Unrecognized character escape '?' (code > 63)\n at [Source: [B@6bdb244b; line: 6, column: 31]]; > }{[Wv1luevnSfCUKjlWZjtKaQ][logstash-2014.11.16][2]: > SearchParseException[[logstash-2014.11.16][2]: from[-1],size[-1]: Parse > Failure [Failed to parse source [\n{\n\"query\": {\n \"filtered\":{\n > \"filter\": {\n \"term\": { \"message\":\"\\?confid\"}\n }\n > }\n }\n}]]]; nested: QueryParsingException[[logstash-2014.11.16] Failed to > parse]; nested: JsonParseException[Unrecognized character escape '?' (code > 63)\n at [Source: [B@6bdb244b; line: 6, column: 31]]; > }{[Wv1luevnSfCUKjlWZjtKaQ][logstash-2014.11.16][3]: > SearchParseException[[logstash-2014.11.16][3]: from[-1],size[-1]: Parse > Failure [Failed to parse source [\n{\n\"query\": {\n \"filtered\":{\n > \"filter\": {\n \"term\": { \"message\":\"\\?confid\"}\n }\n > }\n }\n}]]]; nested: QueryParsingException[[logstash-2014.11.16] Failed to > parse]; nested: JsonParseException[Unrecognized character escape '?' (code > 63)\n at [Source: [B@6bdb244b; line: 6, column: 31]]; > }{[Wv1luevnSfCUKjlWZjtKaQ][logstash-2014.11.16][4]: > SearchParseException[[logstash-2014.11.16][4]: from[-1],size[-1]: Parse > Failure [Failed to parse source [\n{\n\"query\": {\n \"filtered\":{\n > \"filter\": {\n \"term\": { \"message\":\"\\?confid\"}\n }\n > }\n }\n}]]]; nested: QueryParsingException[[logstash-2014.11.16] Failed to > parse]; nested: JsonParseException[Unrecognized character escape '?' (code > 63)\n at [Source: [B@6bdb244b; line: 6, column: 31]]; }]", > > "status" : 400 > > } > > > HOW TO GET THE "?" searched? IT SEEMS "\?" DOESN't WORK. > > I am running: elastic search version: "1.3.4" > > > > -- > You received this message because you are subscribed to a topic in the > Google Groups "elasticsearch" group. > To unsubscribe from this topic, visit > https://groups.google.com/d/topic/elasticsearch/od2ip65toMo/unsubscribe. > To unsubscribe from this group and all its topics, send an email to > [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/elasticsearch/8b68bd5e-4292-485b-be4b-ccdf62f484e7%40googlegroups.com > <https://groups.google.com/d/msgid/elasticsearch/8b68bd5e-4292-485b-be4b-ccdf62f484e7%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAMhuXwk99dyfpOxd1N8-pkSyhX%3D85X_KRoaMrO9LHsJhZVVhQQ%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
