I'm starting an ES cluster on Windows, still on first node. ES & Logstash
are running fine, but Marvel is failing with a "Failed to parse source"
against the @timestamp field.
I've uninstalled, reinstalled, restarted. I checked the indices and
.marvel-YYYY.MM.DD is there and has data in it.
Any help on how to tshoot further is much appreciated. Trying to demo so
we can purchase, but stuck on this.
Thanks, Rick
[2015-03-04 12:03:42,981][DEBUG][action.search.type ] [Doctor Bong]
[.marvel-2015.03.04][0], node[XtdYbJwaQQSLJbYTfMPA4g], [R], s[STARTED]:
Failed to execute [org.elasticsearch.action.search.SearchRequest@1ba00061]
org.elasticsearch.search.SearchParseException: [.marvel-2015.03.04][0]:
from[-1],size[1]: Parse Failure [Failed to parse source
[{"size":1,"sort":{"@timestamp":{"order":"desc"}}}]]
at
org.elasticsearch.search.SearchService.parseSource(SearchService.java:687)
at
org.elasticsearch.search.SearchService.createContext(SearchService.java:543)
at
org.elasticsearch.search.SearchService.createAndPutContext(SearchService.java:515)
at
org.elasticsearch.search.SearchService.executeFetchPhase(SearchService.java:356)
at
org.elasticsearch.search.action.SearchServiceTransportAction$11.call(SearchServiceTransportAction.java:333)
at
org.elasticsearch.search.action.SearchServiceTransportAction$11.call(SearchServiceTransportAction.java:330)
at
org.elasticsearch.search.action.SearchServiceTransportAction$23.run(SearchServiceTransportAction.java:559)
at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Caused by: org.elasticsearch.search.SearchParseException:
[.marvel-2015.03.04][0]: from[-1],size[1]: Parse Failure [No mapping found
for [@timestamp] in order to sort on]
at
org.elasticsearch.search.sort.SortParseElement.addSortField(SortParseElement.java:210)
at
org.elasticsearch.search.sort.SortParseElement.addCompoundSortField(SortParseElement.java:184)
at
org.elasticsearch.search.sort.SortParseElement.parse(SortParseElement.java:96)
at
org.elasticsearch.search.SearchService.parseSource(SearchService.java:671)
... 9 more
[2015-03-04 12:03:42,981][DEBUG][action.search.type ] [Doctor Bong]
All shards failed for phase: [query_fetch]
--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/8ad8029c-0e64-496a-9fb6-0e1c4b01d4a8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
