过滤器中的KIbana bool查询(可视化)

时间:2018-12-10 18:21:14

标签: elasticsearch kibana-5

我正在使用ES 5.6 版本。 Kibana(开发工具)中的以下ES查询有效并且提供了匹配。

GET _search
{
  "query": { "bool": { "must": {"match": {"name": "UNKNOWN" } }, "must_not": {"regexp": {"failureCause": ".*time exceeded.*"} } } }
}

但是在可视化中,如果我在“过滤器”条件中添加查询,则会出现以下错误。

Error: Request to Elasticsearch failed: {"error":{"root_cause":[{"type":"query_shard_exception","reason":"Failed to parse query [\"query\": {

Encountered \" \":\" \": \"\" at line 1, column 6.\nWas expecting one of:\n    <EOF> \n    <AND> ...\n    <OR> ...\n    <NOT> ...\n    \"+\" ...\n    \"-\" ...\n    <BAREOPER> ...\n    \"(\" ...\n    \"*\" ...\n    \"^\" ...\n    <QUOTED> ...\n    <TERM> ...\n    <FUZZY_SLOP> ...\n    <PREFIXTERM> ...\n    <WILDTERM> ...\n    <REGEXPTERM> ...\n    \"[\" ...\n    \"{\" ...\n    <NUMBER> ...\n    ","caused_by":{"type":"parse_exception","reason":"Encountered \" \":\" \": \"\" at line 1, column 6.\nWas expecting one of:\n    <EOF> \n    <AND> ...\n    <OR> ...\n    <NOT> ...\n    \"+\" ...\n    \"-\" ...\n    <BAREOPER> ...\n    \"(\" ...\n    \"*\" ...\n    \"^\" ...\n    <QUOTED> ...\n    <TERM> ...\n    <FUZZY_SLOP> ...\n    <PREFIXTERM> ...\n    <WILDTERM> ...\n    <REGEXPTERM> ...\n    \"[\" ...\n    \"{\" ...\n    <NUMBER> ...\n

“ Kibana可视化”(在“过滤器”)选项中的等效查询是什么?谢谢。

0 个答案:

没有答案