Elasticsearch update by query

Elastic Stack Elasticsearch
1

Hi, This is my code:

POST /logstash-myapp-*/_update_by_query
  {
  "query": {
   "term" : {
     "tags.keyword" : "myapp-stream"
           },
"bool": {
  "filter": [
    {
      "match": {
        "response": "200"
      }
    },
    {
      "match": {
        "response": "206"
      }
    }
  ]
    },
  "match": {
        "request": { "query": "*.ts"}
         }
  }
},
    "script": {
    "inline": "ctx._source.ts_duration = 9",
    "lang": "painless"
  }
}

and i got this error:

{
  "error": {
    "root_cause": [
      {
        "type": "parsing_exception",
        "reason": "[bool] malformed query, expected [END_OBJECT] but found [FIELD_NAME]",
        "line": 1,
        "col": 89
      }
    ],
    "type": "parsing_exception",
    "reason": "[bool] malformed query, expected [END_OBJECT] but found [FIELD_NAME]",
    "line": 1,
    "col": 89
  },
  "status": 400
}

What's the problem ?
Thanx
and also ehere should I add time range if I want ?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.