Hey,
the exception tries to tell you, that there is a problem parsing the string
''/ec2.ap-southeast-1.amazonaws.com'. The reason for this is, that the / is
a reserved character. Just check out the reserved characters for the query
and you can solve it
http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/query-dsl-query-string-query.html#query-string-syntax
--Alex
On Thu, Mar 6, 2014 at 9:26 AM, Subhadip Bagui <i.ba...@gmail.com> wrote:
> Hi,
>
> I'm new in elasticsearch and need some help. I'm getting below exception
> while trying to search a string in elasticsearch using Kibana. Below are
> the components I'm using.
> 1. logstash 1.3.3
> 2. redis : 2.4.10
> 3. elasticsearch: 1.0
> 4.kibana
>
> I'm running elasticsearch with default, single cluster and 1 node. Please
> help to resolve this issue.
> --
> elasticsearch conf:
> ##########################
> bootstrap.mlockall: true
> indices.cache.filter.size: 20%
> index.cache.field.max_size: 50000
> index.cache.field.expire: 10m
> indices.fielddata.cache.size: 30%
> indices.fielddata.cache.expire: -1
> indices.memory.index_buffer_size: 50%
> index.refresh_interval: 30s
> index.translog.flush_threshold_ops: 50000
> index.store.compress.stored: true
>
> threadpool.search.type: fixed
> threadpool.search.size: 20
> threadpool.search.queue_size: 100
>
> threadpool.index.type: fixed
> threadpool.index.size: 30
> threadpool.index.queue_size: 200
>
> threadpool.bulk.type: fixed
> threadpool.bulk.size: 60
> threadpool.bulk.queue_size: 300
> ##############################
>
> ----------------
> [2014-03-06 13:27:08,235][DEBUG][action.search.type ] [Katherine
> "Kitty" Pryde] [logstash-2014.03.06][1], node[QUrNRW5cSi6IS3P_BCZkHw], [P],
> s[STARTED]: Failed to execute
> [org.elasticsearch.action.search.SearchRequest@1c03a4f] lastShard [true]
> org.elasticsearch.search.SearchParseException: [logstash-2014.03.06][1]:
> from[-1],size[-1]: Parse Failure [Failed to parse source
> [{"query":{"filtered":{"query":{"bool":{"should":[{"query_string":{"query":"/
> ec2.ap-southeast-1.amazonaws.com
> "}}]}},"filter":{"bool":{"must":[{"match_all":{}},{"range":{"@timestamp":{"from":1394006201505,"to":"now"}}},{"bool":{"must":[{"match_all":{}}]}}]}}}},"highlight":{"fields":{},"fragment_size":
> 2147483647,"pre_tags":["@start-highlight@"],"post_tags":["@end-highlight@
> "]},"size":20000,"sort":[{"@timestamp":{"order":"desc"}}]}]]
> at
> org.elasticsearch.search.SearchService.parseSource(SearchService.java:586)
> at
> org.elasticsearch.search.SearchService.createContext(SearchService.java:489)
> at
> org.elasticsearch.search.SearchService.createContext(SearchService.java:474)
> at
> org.elasticsearch.search.SearchService.createAndPutContext(SearchService.java:467)
> at
> org.elasticsearch.search.SearchService.executeQueryPhase(SearchService.java:239)
> at
> org.elasticsearch.search.action.SearchServiceTransportAction.sendExecuteQuery(SearchServiceTransportAction.java:202)
> at
> org.elasticsearch.action.search.type.TransportSearchQueryThenFetchAction$AsyncAction.sendExecuteFirstPhase(TransportSearchQueryThenFetchAction.java:80)
> at
> org.elasticsearch.action.search.type.TransportSearchTypeAction$BaseAsyncAction.performFirstPhase(TransportSearchTypeAction.java:216)
> at
> org.elasticsearch.action.search.type.TransportSearchTypeAction$BaseAsyncAction.performFirstPhase(TransportSearchTypeAction.java:203)
> at
> org.elasticsearch.action.search.type.TransportSearchTypeAction$BaseAsyncAction$2.run(TransportSearchTypeAction.java:186)
> at
> java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:895)
> at
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:918)
> at java.lang.Thread.run(Thread.java:662)
> Caused by: org.elasticsearch.index.query.QueryParsingException:
> [logstash-2014.03.06] Failed to parse query [/
> ec2.ap-southeast-1.amazonaws.com]
> at
> org.elasticsearch.index.query.QueryStringQueryParser.parse(QueryStringQueryParser.java:235)
> at
> org.elasticsearch.index.query.QueryParseContext.parseInnerQuery(QueryParseContext.java:223)
> at
> org.elasticsearch.index.query.BoolQueryParser.parse(BoolQueryParser.java:107)
> at
> org.elasticsearch.index.query.QueryParseContext.parseInnerQuery(QueryParseContext.java:223)
> at
> org.elasticsearch.index.query.FilteredQueryParser.parse(FilteredQueryParser.java:71)
> at
> org.elasticsearch.index.query.QueryParseContext.parseInnerQuery(QueryParseContext.java:223)
> at
> org.elasticsearch.index.query.IndexQueryParserService.parse(IndexQueryParserService.java:321)
> at
> org.elasticsearch.index.query.IndexQueryParserService.parse(IndexQueryParserService.java:260)
> at
> org.elasticsearch.search.query.QueryParseElement.parse(QueryParseElement.java:33)
> at
> org.elasticsearch.search.SearchService.parseSource(SearchService.java:574)
> ... 12 more
> Caused by: org.apache.lucene.queryparser.classic.ParseException: Cannot
> parse '/ec2.ap-southeast-1.amazonaws.com': Lexical error at line 1,
> column 34. Encountered: <EOF> after : "/ec2.ap-southeast-1.amazonaws.com"
> at
> org.apache.lucene.queryparser.classic.QueryParserBase.parse(QueryParserBase.java:130)
> at
> org.apache.lucene.queryparser.classic.MapperQueryParser.parse(MapperQueryParser.java:882)
> at
> org.elasticsearch.index.query.QueryStringQueryParser.parse(QueryStringQueryParser.java:218)
> ... 21 more
>
> --
> You received this message because you are subscribed to the Google Groups
> "elasticsearch" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to elasticsearch+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/elasticsearch/75c89289-6448-475b-ac49-b9e133aec91e%40googlegroups.com<https://groups.google.com/d/msgid/elasticsearch/75c89289-6448-475b-ac49-b9e133aec91e%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
> For more options, visit https://groups.google.com/groups/opt_out.
>
--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to elasticsearch+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/CAGCwEM8ej2vfEJuLkG94Ozk_PHfAeXAUOHTmf8yqDm28F1ED3A%40mail.gmail.com.
For more options, visit https://groups.google.com/groups/opt_out.
