Aggregates filters

Elastic Stack Elasticsearch
1

I have a query that i'm trying to run against ES 1.3.4 and i'm not able to
use the filters buckets.

Here is my query. It's actually pulled straight from the documentation with
some small changes.

{
"aggs" : {
"messages" : {
"filters" : {
"filters" : {
"errors" : { "term" : { "request" : " blah.json" }},
"warnings" : { "term" : { "domain" : "blah" }}
}
},
"aggs" : {
"monthly" : {
"histogram" : {
"field" : "timestamp",
"interval" : "1M"
}
}
}
}

}
}

I get back quite a few errors, but this one seems most likely to be the
most important.

SearchParseException[[logstash-2014.12.01.12][2]: from[-1],size[-1]: Parse
Failure [Could not find aggregator type [filters] in [messages]]]; }]",
"status": 400

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/62353474-16e9-4c5d-9a26-b552e3617ccc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

2

Hi Robert,

The filters aggregation was added in version 1.4. As you are running 1.3.4,
you will need to upgrade your Elasticsearch cluster if you want to make use
of it

Colin

On Monday, 1 December 2014 12:49:09 UTC, Robert Gardam wrote:

I have a query that i'm trying to run against ES 1.3.4 and i'm not able to
use the filters buckets.

Here is my query. It's actually pulled straight from the documentation
with some small changes.

{
"aggs" : {
"messages" : {
"filters" : {
"filters" : {
"errors" : { "term" : { "request" : " blah.json" }},
"warnings" : { "term" : { "domain" : "blah" }}
}
},
"aggs" : {
"monthly" : {
"histogram" : {
"field" : "timestamp",
"interval" : "1M"
}
}
}
}

}
}

I get back quite a few errors, but this one seems most likely to be the
most important.

SearchParseException[[logstash-2014.12.01.12][2]: from[-1],size[-1]: Parse
Failure [Could not find aggregator type [filters] in [messages]]]; }]",
"status": 400

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/5ebb0af2-1224-4b8d-b6e9-dfbe054ade9d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.