Hi, I posted an earlier note on looking for "?" properly but didn't receive a response. I am trying again.
https://groups.google.com/forum/?utm_medium=email&utm_source=footer#!msg/elasticsearch/od2ip65toMo/f-Ss6I1AXZ4J Essentially, I need to query for a string "?confid" but I tried the following: [root@node4 logstash]# curl -XGET ' http://localhost:9200/logstash-2014.11.16/_search?pretty' -d ' { "query": { "filtered":{ "filter": { "term": { "message":"?confid"} } } } }' No response, I tried curl -XGET 'http://localhost:9200/logstash-2014.11.16/nginx_access/_search?pretty' -d ' { "query":{ "match_phrase":{ "rom": "\?confid"} } }' I get an error "error" : "SearchPhaseExecutionException[Failed to execute phase [query], all shards failed; shardFailures {[NvvTH0l6Qmag49B_Muybyw][logstash-2014.11.16][0]: SearchParseException[[logstash-2014.11.16][0]: from[-1],size[-1]: Parse Failure [Failed to parse source [\n{\n \"query\":{\n \"match_phrase\":{ \"rom\": \"\\?confid\"}\n }\n}]]]; nested: QueryParsingException[[logstash-2014.11.16] Failed to parse]; nested: JsonParseException[Unrecognized character escape '?' (code 63)\n at [Source: [B@21cf628a; line: 4, column: 33]]; }{[NvvTH0l6Qmag49B_Muybyw][logstash-2014.11.16][1]: SearchParseException[[logstash-2014.11.16][1]: from[-1],size[-1]: Parse Failure [Failed to parse source [\n{\n \"query\":{\n \"match_phrase\":{ \"rom\": \"\\?confid\"}\n }\n}]]]; nested: QueryParsingException[[logstash-2014.11.16] Failed to parse]; nested: JsonParseException[Unrecognized character escape '?' (code 63)\n at [Source: [B@21cf628a; line: 4, column: 33]]; }{[NvvTH0l6Qmag49B_Muybyw][logstash-2014.11.16][2]: SearchParseException[[logstash-2014.11.16][2]: from[-1],size[-1]: Parse Failure [Failed to parse source [\n{\n \"query\":{\n \"match_phrase\":{ \"rom\": \"\\?confid\"}\n }\n}]]]; nested: QueryParsingException[[logstash-2014.11.16] Failed to parse]; nested: JsonParseException[Unrecognized character escape '?' (code 63)\n at [Source: [B@21cf628a; line: 4, column: 33]]; }{[NvvTH0l6Qmag49B_Muybyw][logstash-2014.11.16][3]: SearchParseException[[logstash-2014.11.16][3]: from[-1],size[-1]: Parse Failure [Failed to parse source [\n{\n \"query\":{\n \"match_phrase\":{ \"rom\": \"\\?confid\"}\n }\n}]]]; nested: QueryParsingException[[logstash-2014.11.16] Failed to parse]; nested: JsonParseException[Unrecognized character escape '?' (code 63)\n at [Source: [B@21cf628a; line: 4, column: 33]]; }{[NvvTH0l6Qmag49B_Muybyw][logstash-2014.11.16][4]: SearchParseException[[logstash-2014.11.16][4]: from[-1],size[-1]: Parse Failure [Failed to parse source [\n{\n \"query\":{\n \"match_phrase\":{ \"rom\": \"\\?confid\"}\n }\n}]]]; nested: QueryParsingException[[logstash-2014.11.16] Failed to parse]; nested: JsonParseException[Unrecognized character escape '?' (code 63)\n at [Source: [B@21cf628a; line: 4, column: 33]]; }]", "status" : 400 } Thanks. BIll -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/2fc7dd35-032b-41d9-9e46-a53b2dab1f9c%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
