Hello, I have an instance of ELK stood up but I've been running into an
error. Whenever I try to use the bettermap widget, I get an error in the
Elasticsearch logs. This only happens when I use bettermap, I am able to
load tables and graphs just fine. The error message seems to be generic,
can anybody make sense what is going on?
[Cordelia Frost] [sefapp-2015.01.28][2], node[HHjIKiPXT-CDD9ARWHpPyg], [P],
s[STARTED]: Failed to execute
[org.elasticsearch.action.search.SearchRequest@25583095] lastShard [true]
org.elasticsearch.search.SearchParseException: [sefapp-2015.01.28][2]:
from[-1],size[-1]: Parse Failure [Failed to parse source
[{"query":{"filtered":{"query":{"bool":{"should":[{"query_string":{"query":"*"}}]}},"filter":{"bool":{"must":[{"range":{"@timestamp":{"from":1419881463441,"to":1422473463441}}},{"exists":{"field":null}}]}}}},"fields":[null,"_id"],"size":1000,"sort":[{"@timestamp":{"order":"desc"}}]}]]
at
org.elasticsearch.search.SearchService.parseSource(SearchService.java:681)
at
org.elasticsearch.search.SearchService.createContext(SearchService.java:537)
at
org.elasticsearch.search.SearchService.createAndPutContext(SearchService.java:509)
at
org.elasticsearch.search.SearchService.executeQueryPhase(SearchService.java:264)
at
org.elasticsearch.search.action.SearchServiceTransportAction$5.call(SearchServiceTransportAction.java:231)
at
org.elasticsearch.search.action.SearchServiceTransportAction$5.call(SearchServiceTransportAction.java:228)
at
org.elasticsearch.search.action.SearchServiceTransportAction$23.run(SearchServiceTransportAction.java:559)
at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at java.lang.Thread.run(Thread.java:745)
Caused by: org.elasticsearch.index.query.QueryParsingException:
[sefapp-2015.01.28] exists must be provided with a [field]
at
org.elasticsearch.index.query.ExistsFilterParser.parse(ExistsFilterParser.java:79)
at
org.elasticsearch.index.query.QueryParseContext.executeFilterParser(QueryParseContext.java:343)
at
org.elasticsearch.index.query.QueryParseContext.parseInnerFilter(QueryParseContext.java:324)
at
org.elasticsearch.index.query.BoolFilterParser.parse(BoolFilterParser.java:92)
at
org.elasticsearch.index.query.QueryParseContext.executeFilterParser(QueryParseContext.java:343)
at
org.elasticsearch.index.query.QueryParseContext.parseInnerFilter(QueryParseContext.java:324)
at
org.elasticsearch.index.query.FilteredQueryParser.parse(FilteredQueryParser.java:74)
at
org.elasticsearch.index.query.QueryParseContext.parseInnerQuery(QueryParseContext.java:277)
at
org.elasticsearch.index.query.IndexQueryParserService.innerParse(IndexQueryParserService.java:382)
at
org.elasticsearch.index.query.IndexQueryParserService.parse(IndexQueryParserService.java:281)
at
org.elasticsearch.index.query.IndexQueryParserService.parse(IndexQueryParserService.java:276)
at
org.elasticsearch.search.query.QueryParseElement.parse(QueryParseElement.java:33)
at
org.elasticsearch.search.SearchService.parseSource(SearchService.java:665)
... 9 more
--
View this message in context:
http://elasticsearch-users.115913.n3.nabble.com/Bettermap-query-failure-tp4069745.html
Sent from the ElasticSearch Users mailing list archive at Nabble.com.
--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/1422474146570-4069745.post%40n3.nabble.com.
For more options, visit https://groups.google.com/d/optout.
