ELK,萌萌哒

搜索报错 Failed to execute

Elasticsearch | 作者 kisspuppet | 发布于2015年03月25日 | 阅读数:7888

ES版本1.4.4

[2015-03-25 17:07:26,175][DEBUG][action.search.type ] [smoker] [logstash-2015.03.25][0], node[kqIv_AuyRtqkBV522IaT1g], [P], s[STARTED]: Failed to execute [org.elasticsearch.action.search.SearchRequest@3339c51d]
org.elasticsearch.search.SearchParseException: [logstash-2015.03.25][0]: from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"bool":{"should":[{"query_string":{"query":"*"}}]}},"filter":{"bool":{"must":[{"range":{"@timestamp":{"from":1427188067747,"to":1427274467747}}},{"exists":{"field":null}}]}}}},"fields":[null,"_id"],"size":1000,"sort":[{"@timestamp":{"order":"desc"}}]}]]
at org.elasticsearch.search.SearchService.parseSource(SearchService.java:687)
at org.elasticsearch.search.SearchService.createContext(SearchService.java:543)
at org.elasticsearch.search.SearchService.createAndPutContext(SearchService.java:515)
at org.elasticsearch.search.SearchService.executeQueryPhase(SearchService.java:277)
at org.elasticsearch.search.action.SearchServiceTransportAction$5.call(SearchServiceTransportAction.java:231)
at org.elasticsearch.search.action.SearchServiceTransportAction$5.call(SearchServiceTransportAction.java:228)
at org.elasticsearch.search.action.SearchServiceTransportAction$23.run(SearchServiceTransportAction.java:559)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at java.lang.Thread.run(Thread.java:745)
Caused by: org.elasticsearch.index.query.QueryParsingException: [logstash-2015.03.25] exists must be provided with a [field]
at org.elasticsearch.index.query.ExistsFilterParser.parse(ExistsFilterParser.java:79)
at org.elasticsearch.index.query.QueryParseContext.executeFilterParser(QueryParseContext.java:347)
at org.elasticsearch.index.query.QueryParseContext.parseInnerFilter(QueryParseContext.java:328)
at org.elasticsearch.index.query.BoolFilterParser.parse(BoolFilterParser.java:92)
at org.elasticsearch.index.query.QueryParseContext.executeFilterParser(QueryParseContext.java:347)
at org.elasticsearch.index.query.QueryParseContext.parseInnerFilter(QueryParseContext.java:328)
at org.elasticsearch.index.query.FilteredQueryParser.parse(FilteredQueryParser.java:74)
at org.elasticsearch.index.query.QueryParseContext.parseInnerQuery(QueryParseContext.java:281)
at org.elasticsearch.index.query.IndexQueryParserService.innerParse(IndexQueryParserService.java:382)
at org.elasticsearch.index.query.IndexQueryParserService.parse(IndexQueryParserService.java:281)
at org.elasticsearch.index.query.IndexQueryParserService.parse(IndexQueryParserService.java:276)
at org.elasticsearch.search.query.QueryParseElement.parse(QueryParseElement.java:33)
at org.elasticsearch.search.SearchService.parseSource(SearchService.java:671)
... 9 more
[2015-03-25 17:07:26,178][DEBUG][action.search.type ] [smoker] All shards failed for phase: [query]
已邀请:

stab - freshman

赞同来自: Rubricate

有输入么?也贴上来看看

kisspuppet - Open Source Geek

赞同来自:

貌似ok了 跟filed有关!

要回复问题请先登录注册