我正在使用ES 5.6 版本。 Kibana(开发工具)中的以下ES查询有效并且提供了匹配。
GET _search
{
"query": { "bool": { "must": {"match": {"name": "UNKNOWN" } }, "must_not": {"regexp": {"failureCause": ".*time exceeded.*"} } } }
}
但是在可视化中,如果我在“过滤器”条件中添加查询,则会出现以下错误。
Error: Request to Elasticsearch failed: {"error":{"root_cause":[{"type":"query_shard_exception","reason":"Failed to parse query [\"query\": {
Encountered \" \":\" \": \"\" at line 1, column 6.\nWas expecting one of:\n <EOF> \n <AND> ...\n <OR> ...\n <NOT> ...\n \"+\" ...\n \"-\" ...\n <BAREOPER> ...\n \"(\" ...\n \"*\" ...\n \"^\" ...\n <QUOTED> ...\n <TERM> ...\n <FUZZY_SLOP> ...\n <PREFIXTERM> ...\n <WILDTERM> ...\n <REGEXPTERM> ...\n \"[\" ...\n \"{\" ...\n <NUMBER> ...\n ","caused_by":{"type":"parse_exception","reason":"Encountered \" \":\" \": \"\" at line 1, column 6.\nWas expecting one of:\n <EOF> \n <AND> ...\n <OR> ...\n <NOT> ...\n \"+\" ...\n \"-\" ...\n <BAREOPER> ...\n \"(\" ...\n \"*\" ...\n \"^\" ...\n <QUOTED> ...\n <TERM> ...\n <FUZZY_SLOP> ...\n <PREFIXTERM> ...\n <WILDTERM> ...\n <REGEXPTERM> ...\n \"[\" ...\n \"{\" ...\n <NUMBER> ...\n
“ Kibana可视化”(在“过滤器”)选项中的等效查询是什么?谢谢。