Fuzziness on multiple fields and match a particular field elastic search query

Hi All,

My requirement is to get the response for a specific word which can be appear anywhere in the document and it should belongs the user's account id. i've to use date range query like last 3 hours or 24 hours documents to fetch.

GET logstash_itsm_incidents_parent/_search
{
  "query": {
    "multi_match" : {
      "query":    "009",
      "fields": [ "incident_number", "description", "short_description" , "incident_parent_id.company"] ,
      "fuzziness": 1
    },
    "match": {
      "account_id": {
        "query": "AC002231"
      }
    }

  }
}

I get parsing error.

{
  "error": {
    "root_cause": [
      {
        "type": "parsing_exception",
        "reason": "[multi_match] malformed query, expected [END_OBJECT] but found [FIELD_NAME]",
        "line": 8,
        "col": 5
      }
    ],
    "type": "parsing_exception",
    "reason": "[multi_match] malformed query, expected [END_OBJECT] but found [FIELD_NAME]",
    "line": 8,
    "col": 5
  },
  "status": 400
}

Please help me out. how to query for the users account id and fuzzy logic on specifi fields , date /time range filter. Thanks in advance.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.