Elasticsearch '[bool] failed to parse field [filter]' exception

Question

I am trying to solve parsing exception of my search query. I would like to get some help there :)

The exception reason: '[1:65] [bool] failed to parse field [filter]' message:'x_content_parse_exception'

My search:

data = (await this.elasticClient.search({
        index: Indexes.Measurements,
        size: 10000,
        body: {
          query: {
            bool: {
              filter: {
                terms: {
                  "MachineId": ["mo3", "mo2"]
                },
                range: {
                  '@timestamp': {
                    gte: `now-${lastMinutes}m`,
                    lte: 'now'
                  }
                }
              }
            },
          },
          sort : [{ "@timestamp" : "desc" }]
      }})).body.hits.hits.map(data => data._source);

Bhavya · Accepted Answer · 2020-11-15 09:43:40Z

4

You are missing [] around the filter clause, try out this below query

data = (await this.elasticClient.search({
        index: Indexes.Measurements,
        size: 10000,
        body: {
          query: {
            bool: {
              filter: [{
                terms: {
                  "MachineId": ["mo3", "mo2"]
                }},{
                range: {
                  '@timestamp': {
                    gte: `now-${lastMinutes}m`,
                    lte: 'now'
                  }
                }}]
              }
            },
          },
          sort : [{ "@timestamp" : "desc" }]
      }})).body.hits.hits.map(data => data._source);

In JSON format, it will be like this

{
  "query": {
    "bool": {
      "filter": [
        {
          "terms": {
            "MachineId": [
              "mo3",
              "mo2"
            ]
          }
        },
        {
          "range": {
            "timestamp": {
              "gte": "now-${lastMinutes}m",
              "lte": "now"
            }
          }
        }
      ]
    }
  }
}

edited Nov 15, 2020 at 9:43

answered Nov 15, 2020 at 9:38

Bhavya

16.2k3 gold badges23 silver badges52 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Bhavya Over a year ago

@RanNissan I have added the query in JSON format also, try to match the brackets from that, as the error clearly shows that the query is not properly formed.

Ralf Eichinger · Accepted Answer · 2024-01-29 15:47:45Z

1

the exception message also appears if the query string is longer than 10000.

V8 ElasticSearchClient's JsonpUtils has a default max length of 10000, cutting longer queries (and adding "..."). So JSON no longer is valid.

We had to set a new max length with "JsonpUtils.maxToStringLength(500000);" (at your own risk...)

answered Jan 29, 2024 at 15:47

Ralf Eichinger

335 bronze badges

Collectives™ on Stack Overflow

Elasticsearch '[bool] failed to parse field [filter]' exception

2 Answers 2

1 Comment

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Related