Elasticsearch Engineer Training - Lab 4.2/4.3 - 404 during update by query

I have a problem with the elasticsearch training in module 4.2 and 4.3 (only 4.3 included since it's shorter and the problems are the same).

When I create a policy and execute the policy index creation and then construct the transform pipeline, I get success, but when I attempt to update by query, I get a failure with 404.

PUT _enrich/policy/webtraffic_policy
{
  "match": {
    "indices": "traffic_stats",
    "match_field": "url.original",
    "enrich_fields": ["@timestamp.value_count", "runtime_ms.avg"]
  }
}

POST _enrich/policy/webtraffic_policy/_execute

PUT _ingest/pipeline/webtraffic_transform_pipeline
{
  "processors": [
    {
      "enrich": {
        "field": "url",
        "policy_name": "webtraffic_policy",
        "target_field": "traffic_stats"
      }
    }
  ]
}

POST blogs_fixed3/_update_by_query?pipeline=webtraffic_transform_pipeline?wait_for_completion=false

Here is the head of the errored response. It looks to me like wait_for_completion=false parameter is being included in the pipeline ID.

{
  "took" : 181,
  "timed_out" : false,
  "total" : 4659,
  "updated" : 0,
  "deleted" : 0,
  "batches" : 1,
  "version_conflicts" : 0,
  "noops" : 0,
  "retries" : {
    "bulk" : 0,
    "search" : 0
  },
  "throttled_millis" : 0,
  "requests_per_second" : -1.0,
  "throttled_until_millis" : 0,
  "failures" : [
    {
      "index" : "blogs_fixed3",
      "type" : "_doc",
      "id" : "qRKJAHwBQJh2eNuxyEoi",
      "cause" : {
        "type" : "illegal_argument_exception",
        "reason" : "pipeline with id [webtraffic_transform_pipeline?wait_for_completion=false] does not exist"
      },
      "status" : 400
    },
...

Can someone tell me what I'm not understanding here?

thanks

Solved: The text provided by the instructions for 4.2 step 12 is incorrect and I missed the typo; the second ? should be &. I then reused and modified the incorrect text in the second instance at 4.3 step 9 where the provided text is correct.

Good catch! I've got a ticket open to get this fixed.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.