Elasticsearch: How to use aggregations with query?

Question

I'm a fresh bee in elastic search and I'm trying to query documents from elastic search with aggregation. The query looks like this:

{ "size": 25000, "query": { "filtered": { "query": { "bool": { "must_not": { "term": { "vlanId": [ 2, 4, 8, 12, 16, 28, 0, 20, 24, 44, 544 ] } } } }, "filter": { "bool": { "must": { "exists": { "field": "ipv4" } } } } } }, "aggregations": { "vlan_ids": { "terms": { "field": "vlanId" }, "aggregations": { "top": { "top_hits": { "from": 0, "size": 10, "explain": true } } } } } }

After the execution, I'm getting Failed to execute phase [query], all shards failed exception. I'm using Java API and elasticsearch 1.4v. Any lead is much appreciated.

Here is the sample JSON:

{ "_index":"vlan-active",  "_source":{  "vlanId":8,  "port":3,  "vlanIP":"10.16.8.102",  "ipv4":"10.16.8.102",  "ipv6":"",  "mac":"",  "vendorName":"","os":""}}

Can you include your index configuration? Sample data?

Tim
– Tim

2017-03-02 13:33:21 +00:00
Commented Mar 2, 2017 at 13:33 — Tim
– Tim, Commented Mar 2, 2017 at 13:33
Wasn't there any cause for the exception?

Kulasangar
– Kulasangar

2017-03-02 15:33:01 +00:00
Commented Mar 2, 2017 at 15:33 — Kulasangar
– Kulasangar, Commented Mar 2, 2017 at 15:33
@TIM: Added the sample JSON.

Sachin S Rao
– Sachin S Rao

2017-03-03 06:02:36 +00:00
Commented Mar 3, 2017 at 6:02 — Sachin S Rao
– Sachin S Rao, Commented Mar 3, 2017 at 6:02

Sachin S Rao · Accepted Answer · 2017-03-03 06:07:37Z

2

term query will match field to a single value. In order to match multiple values like in clause, terms should be used instead of term.

I changed the keyword term to terms and got it working.

answered Mar 3, 2017 at 6:07

Sachin S Rao

1391 gold badge1 silver badge11 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Adonis · Accepted Answer · 2017-03-02 22:09:56Z

0

Your query starts and end with square brackets ("[]"), that is why it is not working. DSL queries should start with curly braces (i.e. "{}")

Edit: Removed the confusion due to my rhetorical question

edited Mar 2, 2017 at 22:09

answered Mar 2, 2017 at 13:54

Adonis

4,8183 gold badges41 silver badges62 bronze badges

4 Comments

Adonis Over a year ago

It was a rhetorical question as given his query it's not possible to run. Fair point though, since it is confusing I'll edit it

Adonis Over a year ago

Edited my post to clarify that it is an answer

Adonis Over a year ago

@clearlight: Fair enough, I started being active recently, I'm not 100% on the rules. Thanks for your clarification!

Sachin S Rao Over a year ago

toString() method added the sqaure brackets! Sorry, my bad! With cutly braces also, the query is not working.

Collectives™ on Stack Overflow

Elasticsearch: How to use aggregations with query?

2 Answers 2

Comments

4 Comments

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

4 Comments

Related