# Getting Infinity and -Infinity in terms\_stats query. What does it mean? **URL:** \ **Category:** Elasticsearch\ **Created:** [April 17, 2013, 10:15am UTC](https://discuss.elastic.co/t/getting-infinity-and-infinity-in-terms-stats-query-what-does-it-mean/11612 "2013-04-17T10:15:36Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![shadyabhi](https://avatars.discourse-cdn.com/v4/letter/s/edb3f5/32.png) [@shadyabhi](https://discuss.elastic.co/u/shadyabhi)\ **Post date:** [April 17, 2013, 10:15am UTC](https://discuss.elastic.co/t/getting-infinity-and-infinity-in-terms-stats-query-what-does-it-mean/11612/1 "2013-04-17T10:15:36Z")
Hi all, I'm doing a simple query like: curl -XPOST '[http://localhost:9200/logstash-2013.04.17/\_search?pretty](http://localhost:9200/logstash-2013.04.17/_search?pretty)' -d '{ "query": { "match\_all": { } }, "facets" : { "domain\_size" : { "terms\_stats" : { "key\_field" : "@fields.from", "value\_field" : "@fields.size" } } } }' In this, @fields.size is a long and @fields.from is a string which is non\_analyzed. I get results like: "domain\_size" : { ``` "_type" : "terms_stats", "missing" : 622069, "terms" : [ { "term" : "", "count" : 10689, "total_count" : 0, "min" : "Infinity", "max" : "-Infinity", "total" : 0.0, "mean" : 0.0 }, { "term" : "email1@domain.com", "count" : 6931, "total_count" : 0, "min" : "Infinity", "max" : "-Infinity", "total" : 0.0, "mean" : 0.0 } ``` .. .. .. .. I've truncated the output and have shown only the relevant parts. I'm not where do I look at to solve the problem. -- Regards, Abhijeet Rastogi (shadyabhi) > **[Abhijeet's Blog](https://blog.abhijeetr.com/)** > > I write about problems that I solve -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![shadyabhi](https://avatars.discourse-cdn.com/v4/letter/s/edb3f5/32.png) [@shadyabhi](https://discuss.elastic.co/u/shadyabhi)\ **Post date:** [April 17, 2013, 6:32pm UTC](https://discuss.elastic.co/t/getting-infinity-and-infinity-in-terms-stats-query-what-does-it-mean/11612/2 "2013-04-17T18:32:41Z")
One thing I noticed is, I can't execute a lucene query (meaning query\_string type query) like _exists_:"@fields.size" But, I can do that for other fields. What can be the reason for that? Also, when I do a simple matchall query with size as 10, I can see all fields being returned except "@fields.size", what exactly might have happened to this field? This is how my template looks like: [http://pb.abhijeetr.com/jaVK](http://pb.abhijeetr.com/jaVK) I would really appreciate a quick help here. This one is driving me crazy. On Wed, Apr 17, 2013 at 3:45 PM, Abhijeet Rastogi [abhijeet.1989@gmail.com](mailto:abhijeet.1989@gmail.com)wrote: > Hi all, > > I'm doing a simple query like: > > curl -XPOST '[http://localhost:9200/logstash-2013.04.17/\_search?pretty](http://localhost:9200/logstash-2013.04.17/_search?pretty)' -d > '{ > "query": { > "match\_all": { } > }, > "facets" : { > "domain\_size" : { > "terms\_stats" : { > "key\_field" : "@fields.from", > "value\_field" : "@fields.size" > } > } > } > }' > > In this, @fields.size is a long and @fields.from is a string which is > non\_analyzed. > > I get results like: > "domain\_size" : > { > > ``` > "_type" : "terms_stats", > "missing" : 622069, > "terms" : [ { > "term" : "", > "count" : 10689, > "total_count" : 0, > "min" : "Infinity", > "max" : "-Infinity", > "total" : 0.0, > "mean" : 0.0 > }, { > "term" : "email1@domain.com", > "count" : 6931, > "total_count" : 0, > "min" : "Infinity", > "max" : "-Infinity", > "total" : 0.0, > "mean" : 0.0 > } > > ``` > > .. .. > .. > .. > > I've truncated the output and have shown only the relevant parts. I'm not > where do I look at to solve the problem. > > -- > Regards, > Abhijeet Rastogi (shadyabhi) > [http://blog.abhijeetr.com](http://blog.abhijeetr.com) -- Regards, Abhijeet Rastogi (shadyabhi) [http://blog.abhijeetr.com](http://blog.abhijeetr.com) -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![shadyabhi](https://avatars.discourse-cdn.com/v4/letter/s/edb3f5/32.png) [@shadyabhi](https://discuss.elastic.co/u/shadyabhi)\ **Post date:** [April 17, 2013, 6:38pm UTC](https://discuss.elastic.co/t/getting-infinity-and-infinity-in-terms-stats-query-what-does-it-mean/11612/3 "2013-04-17T18:38:25Z")
Sorry for one more mail guys.. By writing " I can't execute a lucene query", what I actually meant was I don't get any search results. Silly me. On Thu, Apr 18, 2013 at 12:02 AM, Abhijeet Rastogi [abhijeet.1989@gmail.com](mailto:abhijeet.1989@gmail.com)wrote: > One thing I noticed is, I can't execute a lucene query (meaning > query\_string type query) like > > _exists_:"@fields.size" > > But, I can do that for other fields. What can be the reason for that? > Also, when I do a simple matchall query with size as 10, I can see all > fields being returned except "@fields.size", what exactly might have > happened to this field? > > This is how my template looks like: [http://pb.abhijeetr.com/jaVK](http://pb.abhijeetr.com/jaVK) > > I would really appreciate a quick help here. This one is driving me crazy. > > On Wed, Apr 17, 2013 at 3:45 PM, Abhijeet Rastogi \<[abhijeet.1989@gmail.com](mailto:abhijeet.1989@gmail.com) > > > wrote: > > > Hi all, > > > > I'm doing a simple query like: > > > > curl -XPOST '[http://localhost:9200/logstash-2013.04.17/\_search?pretty](http://localhost:9200/logstash-2013.04.17/_search?pretty)' > > -d '{ > > "query": { > > "match\_all": { } > > }, > > "facets" : { > > "domain\_size" : { > > "terms\_stats" : { > > "key\_field" : "@fields.from", > > "value\_field" : "@fields.size" > > } > > } > > } > > }' > > > > In this, @fields.size is a long and @fields.from is a string which is > > non\_analyzed. > > > > I get results like: > > "domain\_size" : > > { > > > > ``` > > "_type" : "terms_stats", > > "missing" : 622069, > > "terms" : [ { > > "term" : "", > > "count" : 10689, > > "total_count" : 0, > > "min" : "Infinity", > > "max" : "-Infinity", > > "total" : 0.0, > > "mean" : 0.0 > > }, { > > "term" : "email1@domain.com", > > "count" : 6931, > > "total_count" : 0, > > "min" : "Infinity", > > "max" : "-Infinity", > > "total" : 0.0, > > "mean" : 0.0 > > } > > > > ``` > > > > .. .. > > .. > > .. > > > > I've truncated the output and have shown only the relevant parts. I'm not > > where do I look at to solve the problem. > > > > -- > > Regards, > > Abhijeet Rastogi (shadyabhi) > > [http://blog.abhijeetr.com](http://blog.abhijeetr.com) > > -- > Regards, > Abhijeet Rastogi (shadyabhi) > [http://blog.abhijeetr.com](http://blog.abhijeetr.com) -- Regards, Abhijeet Rastogi (shadyabhi) [http://blog.abhijeetr.com](http://blog.abhijeetr.com) -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![shadyabhi](https://avatars.discourse-cdn.com/v4/letter/s/edb3f5/32.png) [@shadyabhi](https://discuss.elastic.co/u/shadyabhi)\ **Post date:** [April 18, 2013, 6:38pm UTC](https://discuss.elastic.co/t/getting-infinity-and-infinity-in-terms-stats-query-what-does-it-mean/11612/4 "2013-04-18T18:38:46Z")
I feel bad to bump this thread, but anyone? I'm really clueless here. On Thu, Apr 18, 2013 at 12:08 AM, Abhijeet Rastogi [abhijeet.1989@gmail.com](mailto:abhijeet.1989@gmail.com)wrote: > Sorry for one more mail guys.. By writing " I can't execute a lucene > query", what I actually meant was I don't get any search results. Silly me. > > On Thu, Apr 18, 2013 at 12:02 AM, Abhijeet Rastogi \< > [abhijeet.1989@gmail.com](mailto:abhijeet.1989@gmail.com)\> wrote: > > > One thing I noticed is, I can't execute a lucene query (meaning > > query\_string type query) like > > > > _exists_:"@fields.size" > > > > But, I can do that for other fields. What can be the reason for that? > > Also, when I do a simple matchall query with size as 10, I can see all > > fields being returned except "@fields.size", what exactly might have > > happened to this field? > > > > This is how my template looks like: [http://pb.abhijeetr.com/jaVK](http://pb.abhijeetr.com/jaVK) > > > > I would really appreciate a quick help here. This one is driving me > > crazy. > > > > On Wed, Apr 17, 2013 at 3:45 PM, Abhijeet Rastogi \< > > [abhijeet.1989@gmail.com](mailto:abhijeet.1989@gmail.com)\> wrote: > > > > > Hi all, > > > > > > I'm doing a simple query like: > > > > > > curl -XPOST '[http://localhost:9200/logstash-2013.04.17/\_search?pretty](http://localhost:9200/logstash-2013.04.17/_search?pretty)' > > > -d '{ > > > "query": { > > > "match\_all": { } > > > }, > > > "facets" : { > > > "domain\_size" : { > > > "terms\_stats" : { > > > "key\_field" : "@fields.from", > > > "value\_field" : "@fields.size" > > > } > > > } > > > } > > > }' > > > > > > In this, @fields.size is a long and @fields.from is a string which is > > > non\_analyzed. > > > > > > I get results like: > > > "domain\_size" : > > > { > > > > > > ``` > > > "_type" : "terms_stats", > > > "missing" : 622069, > > > "terms" : [ { > > > "term" : "", > > > "count" : 10689, > > > "total_count" : 0, > > > "min" : "Infinity", > > > "max" : "-Infinity", > > > "total" : 0.0, > > > "mean" : 0.0 > > > }, { > > > "term" : "email1@domain.com", > > > "count" : 6931, > > > "total_count" : 0, > > > "min" : "Infinity", > > > "max" : "-Infinity", > > > "total" : 0.0, > > > "mean" : 0.0 > > > } > > > > > > ``` > > > > > > .. .. > > > .. > > > .. > > > > > > I've truncated the output and have shown only the relevant parts. I'm > > > not where do I look at to solve the problem. > > > > > > -- > > > Regards, > > > Abhijeet Rastogi (shadyabhi) > > > [http://blog.abhijeetr.com](http://blog.abhijeetr.com) > > > > -- > > Regards, > > Abhijeet Rastogi (shadyabhi) > > [http://blog.abhijeetr.com](http://blog.abhijeetr.com) > > -- > Regards, > Abhijeet Rastogi (shadyabhi) > [http://blog.abhijeetr.com](http://blog.abhijeetr.com) -- Regards, Abhijeet Rastogi (shadyabhi) [http://blog.abhijeetr.com](http://blog.abhijeetr.com) -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![Igor\_Motov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/igor_motov/32/45193_2.png) [@Igor\_Motov](https://discuss.elastic.co/u/Igor_Motov)\ **Post date:** [April 18, 2013, 8:01pm UTC](https://discuss.elastic.co/t/getting-infinity-and-infinity-in-terms-stats-query-what-does-it-mean/11612/5 "2013-04-18T20:01:15Z")
If you don't see fields.size in the source, it means this field wasn't there when you sent the records for indexing. So, you need to go upstream and figure out why application that is feeding elasticsearch with data doesn't populate this field. On Thursday, April 18, 2013 2:38:46 PM UTC-4, Abhijeet Rastogi wrote: > I feel bad to bump this thread, but anyone? I'm really clueless here. > > On Thu, Apr 18, 2013 at 12:08 AM, Abhijeet Rastogi \<[abhije...@gmail.com](mailto:abhije...@gmail.com)\ > > > wrote: > > > Sorry for one more mail guys.. By writing " I can't execute a lucene > > query", what I actually meant was I don't get any search results. Silly me. > > > > On Thu, Apr 18, 2013 at 12:02 AM, Abhijeet Rastogi \<[abhije...@gmail.com](mailto:abhije...@gmail.com)\ > > > > > wrote: > > > > > One thing I noticed is, I can't execute a lucene query (meaning > > > query\_string type query) like > > > > > > _exists_:"@fields.size" > > > > > > But, I can do that for other fields. What can be the reason for that? > > > Also, when I do a simple matchall query with size as 10, I can see all > > > fields being returned except "@fields.size", what exactly might have > > > happened to this field? > > > > > > This is how my template looks like: [http://pb.abhijeetr.com/jaVK](http://pb.abhijeetr.com/jaVK) > > > > > > I would really appreciate a quick help here. This one is driving me > > > crazy. > > > > > > On Wed, Apr 17, 2013 at 3:45 PM, Abhijeet Rastogi \<[abhije...@gmail.com](mailto:abhije...@gmail.com)\ > > > > > > > wrote: > > > > > > > Hi all, > > > > > > > > I'm doing a simple query like: > > > > > > > > curl -XPOST '[http://localhost:9200/logstash-2013.04.17/\_search?pretty](http://localhost:9200/logstash-2013.04.17/_search?pretty)' > > > > -d '{ > > > > "query": { > > > > "match\_all": { } > > > > }, > > > > "facets" : { > > > > "domain\_size" : { > > > > "terms\_stats" : { > > > > "key\_field" : "@fields.from", > > > > "value\_field" : "@fields.size" > > > > } > > > > } > > > > } > > > > }' > > > > > > > > In this, @fields.size is a long and @fields.from is a string which is > > > > non\_analyzed. > > > > > > > > I get results like: > > > > "domain\_size" : > > > > { > > > > > > > > ``` > > > > "_type" : "terms_stats", > > > > "missing" : 622069, > > > > "terms" : [ { > > > > "term" : "", > > > > "count" : 10689, > > > > "total_count" : 0, > > > > "min" : "Infinity", > > > > "max" : "-Infinity", > > > > "total" : 0.0, > > > > "mean" : 0.0 > > > > }, { > > > > "term" : "ema...@domain.com ", > > > > "count" : 6931, > > > > "total_count" : 0, > > > > "min" : "Infinity", > > > > "max" : "-Infinity", > > > > "total" : 0.0, > > > > "mean" : 0.0 > > > > } > > > > > > > > ``` > > > > > > > > .. .. > > > > .. > > > > .. > > > > > > > > I've truncated the output and have shown only the relevant parts. I'm > > > > not where do I look at to solve the problem. > > > > > > > > -- > > > > Regards, > > > > Abhijeet Rastogi (shadyabhi) > > > > [http://blog.abhijeetr.com](http://blog.abhijeetr.com) > > > > > > -- > > > Regards, > > > Abhijeet Rastogi (shadyabhi) > > > [http://blog.abhijeetr.com](http://blog.abhijeetr.com) > > > > -- > > Regards, > > Abhijeet Rastogi (shadyabhi) > > [http://blog.abhijeetr.com](http://blog.abhijeetr.com) > > -- > Regards, > Abhijeet Rastogi (shadyabhi) > [http://blog.abhijeetr.com](http://blog.abhijeetr.com) -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![shadyabhi](https://avatars.discourse-cdn.com/v4/letter/s/edb3f5/32.png) [@shadyabhi](https://discuss.elastic.co/u/shadyabhi)\ **Post date:** [April 19, 2013, 9:52am UTC](https://discuss.elastic.co/t/getting-infinity-and-infinity-in-terms-stats-query-what-does-it-mean/11612/6 "2013-04-19T09:52:07Z")
Hi Igor, Thanks for your reply. I've found the root cause of it and I would really appreciate if you help me understanding what happened! working\_template.json: [http://pb.abhijeetr.com/jeNV](http://pb.abhijeetr.com/jeNV) working\_mapping.json (of newly created index): [http://pb.abhijeetr.com/JLMH](http://pb.abhijeetr.com/JLMH) Diff: non\_working\_template.json: [http://pb.abhijeetr.com/KSWd](http://pb.abhijeetr.com/KSWd) non\_working\_mapping.json (of newly created index): [http://pb.abhijeetr.com/XXBF](http://pb.abhijeetr.com/XXBF) Diffs for quick view: ## $ diff working\_template.json non\_working\_template.json 33,34c33 \< "path\_match": "@fields.\*", \< "path\_unmatch": "@fields.size" > ``` > "path_match": "@fields.*" > > ``` ## $ diff working\_mapping.json non\_working\_mapping.json 9,10c9 \< "path\_match" : "@fields.\*", \< "path\_unmatch" : "@fields.size" > ``` > "path_match" : "@fields.*" > > ``` ## 50c49,52 \< "type" : "string" > ``` > "type" : "string", > "index" : "not_analyzed", > "omit_norms" : true, > "index_options" : "docs" > > ``` Doubts: - In your other thread, you mentioned that if I provide something in properties, the dynamic template won't be applied to it. This doesn't look like the case because I can see size type as string in [http://pb.abhijeetr.com/JLMH](http://pb.abhijeetr.com/JLMH) (working\_mapping.json). But, I also see @fields.size as long in the same mapping. I don't understand the reason b/w the two. If I don't mention size in path\_unmatch, I also start getting Infinity/-Infinity in facet queries. I would really appreciate the help here. - Why do we have "size" and "@fields.size" separately? One says as string and the other as long, I am really lost here. On Fri, Apr 19, 2013 at 1:31 AM, Igor Motov [imotov@gmail.com](mailto:imotov@gmail.com) wrote: > If you don't see fields.size in the source, it means this field wasn't there > when you sent the records for indexing. So, you need to go upstream and > figure out why application that is feeding elasticsearch with data doesn't > populate this field. > > On Thursday, April 18, 2013 2:38:46 PM UTC-4, Abhijeet Rastogi wrote: > > > I feel bad to bump this thread, but anyone? I'm really clueless here. > > > > On Thu, Apr 18, 2013 at 12:08 AM, Abhijeet Rastogi [abhije...@gmail.com](mailto:abhije...@gmail.com) > > wrote: > > > > > Sorry for one more mail guys.. By writing " I can't execute a lucene > > > query", what I actually meant was I don't get any search results. Silly me. > > > > > > On Thu, Apr 18, 2013 at 12:02 AM, Abhijeet Rastogi [abhije...@gmail.com](mailto:abhije...@gmail.com) > > > wrote: > > > > > > > One thing I noticed is, I can't execute a lucene query (meaning > > > > query\_string type query) like > > > > > > > > _exists_:"@fields.size" > > > > > > > > But, I can do that for other fields. What can be the reason for that? > > > > Also, when I do a simple matchall query with size as 10, I can see all > > > > fields being returned except "@fields.size", what exactly might have > > > > happened to this field? > > > > > > > > This is how my template looks like: [http://pb.abhijeetr.com/jaVK](http://pb.abhijeetr.com/jaVK) > > > > > > > > I would really appreciate a quick help here. This one is driving me > > > > crazy. > > > > > > > > On Wed, Apr 17, 2013 at 3:45 PM, Abhijeet Rastogi [abhije...@gmail.com](mailto:abhije...@gmail.com) > > > > wrote: > > > > > > > > > Hi all, > > > > > > > > > > I'm doing a simple query like: > > > > > > > > > > curl -XPOST '[http://localhost:9200/logstash-2013.04.17/\_search?pretty](http://localhost:9200/logstash-2013.04.17/_search?pretty)' > > > > > -d '{ > > > > > "query": { > > > > > "match\_all": { } > > > > > }, > > > > > "facets" : { > > > > > "domain\_size" : { > > > > > "terms\_stats" : { > > > > > "key\_field" : "@fields.from", > > > > > "value\_field" : "@fields.size" > > > > > } > > > > > } > > > > > } > > > > > }' > > > > > > > > > > In this, @fields.size is a long and @fields.from is a string which is > > > > > non\_analyzed. > > > > > > > > > > I get results like: > > > > > "domain\_size" : { > > > > > "\_type" : "terms\_stats", > > > > > "missing" : 622069, > > > > > "terms" : [ { > > > > > "term" : "", > > > > > "count" : 10689, > > > > > "total\_count" : 0, > > > > > "min" : "Infinity", > > > > > "max" : "-Infinity", > > > > > "total" : 0.0, > > > > > "mean" : 0.0 > > > > > }, { > > > > > "term" : "[ema...@domain.com](mailto:ema...@domain.com)", > > > > > > > > > > ``` > > > > > "count" : 6931, > > > > > "total_count" : 0, > > > > > "min" : "Infinity", > > > > > "max" : "-Infinity", > > > > > "total" : 0.0, > > > > > "mean" : 0.0 > > > > > } > > > > > > > > > > ``` > > > > > > > > > > .. .. > > > > > .. > > > > > .. > > > > > > > > > > I've truncated the output and have shown only the relevant parts. I'm > > > > > not where do I look at to solve the problem. > > > > > > > > > > -- > > > > > Regards, > > > > > Abhijeet Rastogi (shadyabhi) > > > > > [http://blog.abhijeetr.com](http://blog.abhijeetr.com) > > > > > > > > -- > > > > Regards, > > > > Abhijeet Rastogi (shadyabhi) > > > > [http://blog.abhijeetr.com](http://blog.abhijeetr.com) > > > > > > -- > > > Regards, > > > Abhijeet Rastogi (shadyabhi) > > > [http://blog.abhijeetr.com](http://blog.abhijeetr.com) > > > > -- > > Regards, > > Abhijeet Rastogi (shadyabhi) > > [http://blog.abhijeetr.com](http://blog.abhijeetr.com) > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). -- Regards, Abhijeet Rastogi (shadyabhi) [http://blog.abhijeetr.com](http://blog.abhijeetr.com) -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![Igor\_Motov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/igor_motov/32/45193_2.png) [@Igor\_Motov](https://discuss.elastic.co/u/Igor_Motov)\ **Post date:** [April 19, 2013, 10:44am UTC](https://discuss.elastic.co/t/getting-infinity-and-infinity-in-terms-stats-query-what-does-it-mean/11612/7 "2013-04-19T10:44:31Z")
Oh, this is a good one! Not sure why I didn't catch it when I looked at your mapping the first time. When you specify "@fields.size" it can point to one of two things depending on the context: 1) the field with the name "@fields.size" and 2) the field "size" inside the field "@fields". It looks like your data look like this: "fields" : { "size": 12345 .... } So, you need to setup mapping for the second case. Therefore, the mapping in your template should look like this: "properties" : { "@fields": { "type": "object", "dynamic": true, "path": "full", "properties": { "syslog\_message" : { "type" : "string", "analyzer" : "whitespace" }, "size" : { "type" : "long" , "index" : "not\_analyzed"} } }, "@source" : { "type" : "string", "index" : "not\_analyzed" }, "@source\_host" : { "type" : "string", "index" : "not\_analyzed" }, "@source\_path" : { "type" : "string", "index" : "not\_analyzed" }, "@timestamp" : { "type" : "date", "index" : "not\_analyzed" }, "@type" : { "type" : "string", "index" : "not\_analyzed" }, "@message" : { "type" : "string", "analyzer" : "standard" } } On Friday, April 19, 2013 5:52:07 AM UTC-4, Abhijeet Rastogi wrote: > Hi Igor, > > Thanks for your reply. I've found the root cause of it and I would > really appreciate if you help me understanding what happened! > > working\_template.json: [http://pb.abhijeetr.com/jeNV](http://pb.abhijeetr.com/jeNV) > working\_mapping.json (of newly created index): > [http://pb.abhijeetr.com/JLMH](http://pb.abhijeetr.com/JLMH) > > Diff: > > non\_working\_template.json: [http://pb.abhijeetr.com/KSWd](http://pb.abhijeetr.com/KSWd) > non\_working\_mapping.json (of newly created index): > [http://pb.abhijeetr.com/XXBF](http://pb.abhijeetr.com/XXBF) > > Diffs for quick view: > > ## $ diff working\_template.json non\_working\_template.json 33,34c33 \< "path\_match": "@fields.\*", \< "path\_unmatch": "@fields.size" > > > ``` > > "path_match": "@fields.*" > > > > ``` > > ## $ diff working\_mapping.json non\_working\_mapping.json 9,10c9 \< "path\_match" : "@fields.\*", \< "path\_unmatch" : "@fields.size" > > > ``` > > "path_match" : "@fields.*" > > > > ``` > > ## 50c49,52 \< "type" : "string" > > > ``` > > "type" : "string", > > "index" : "not_analyzed", > > "omit_norms" : true, > > "index_options" : "docs" > > > > ``` > > Doubts: > > - In your other thread, you mentioned that if I provide something in > properties, the dynamic template won't be applied to it. This doesn't > look like the case because I can see size type as string in > [http://pb.abhijeetr.com/JLMH](http://pb.abhijeetr.com/JLMH) (working\_mapping.json). But, I also see > @fields.size as long in the same mapping. I don't understand the > reason b/w the two. If I don't mention size in path\_unmatch, I also > start getting Infinity/-Infinity in facet queries. I would really > appreciate the help here. > > - Why do we have "size" and "@fields.size" separately? One says as > string and the other as long, I am really lost here. > > On Fri, Apr 19, 2013 at 1:31 AM, Igor Motov \<[imo...@gmail.com](mailto:imo...@gmail.com)\\> > wrote: > > > If you don't see fields.size in the source, it means this field wasn't > > there > > when you sent the records for indexing. So, you need to go upstream and > > figure out why application that is feeding elasticsearch with data > > doesn't > > populate this field. > > > > On Thursday, April 18, 2013 2:38:46 PM UTC-4, Abhijeet Rastogi wrote: > > > > > I feel bad to bump this thread, but anyone? I'm really clueless here. > > > > > > On Thu, Apr 18, 2013 at 12:08 AM, Abhijeet Rastogi [abhije...@gmail.com](mailto:abhije...@gmail.com) > > > > wrote: > > > > > > > Sorry for one more mail guys.. By writing " I can't execute a lucene > > > > query", what I actually meant was I don't get any search results. > > > > Silly me. > > > > > > > > On Thu, Apr 18, 2013 at 12:02 AM, Abhijeet Rastogi \< > > > > [abhije...@gmail.com](mailto:abhije...@gmail.com)\> > > > > wrote: > > > > > > > > > One thing I noticed is, I can't execute a lucene query (meaning > > > > > query\_string type query) like > > > > > > > > > > _exists_:"@fields.size" > > > > > > > > > > But, I can do that for other fields. What can be the reason for that? > > > > > Also, when I do a simple matchall query with size as 10, I can see > > > > > all > > > > > fields being returned except "@fields.size", what exactly might have > > > > > happened to this field? > > > > > > > > > > This is how my template looks like: [http://pb.abhijeetr.com/jaVK](http://pb.abhijeetr.com/jaVK) > > > > > > > > > > I would really appreciate a quick help here. This one is driving me > > > > > crazy. > > > > > > > > > > On Wed, Apr 17, 2013 at 3:45 PM, Abhijeet Rastogi \< > > > > > [abhije...@gmail.com](mailto:abhije...@gmail.com)\> > > > > > wrote: > > > > > > > > > > > Hi all, > > > > > > > > > > > > I'm doing a simple query like: > > > > > > > > > > > > curl -XPOST ' > > > > > > [http://localhost:9200/logstash-2013.04.17/\_search?pretty](http://localhost:9200/logstash-2013.04.17/_search?pretty)' > > > > > > -d '{ > > > > > > "query": { > > > > > > "match\_all": { } > > > > > > }, > > > > > > "facets" : { > > > > > > "domain\_size" : { > > > > > > "terms\_stats" : { > > > > > > "key\_field" : "@fields.from", > > > > > > "value\_field" : "@fields.size" > > > > > > } > > > > > > } > > > > > > } > > > > > > }' > > > > > > > > > > > > In this, @fields.size is a long and @fields.from is a string which > > > > > > is > > > > > > non\_analyzed. > > > > > > > > > > > > I get results like: > > > > > > "domain\_size" : { > > > > > > "\_type" : "terms\_stats", > > > > > > "missing" : 622069, > > > > > > "terms" : [ { > > > > > > "term" : "", > > > > > > "count" : 10689, > > > > > > "total\_count" : 0, > > > > > > "min" : "Infinity", > > > > > > "max" : "-Infinity", > > > > > > "total" : 0.0, > > > > > > "mean" : 0.0 > > > > > > }, { > > > > > > "term" : "[ema...@domain.com](mailto:ema...@domain.com)", > > > > > > > > > > > > ``` > > > > > > "count" : 6931, > > > > > > "total_count" : 0, > > > > > > "min" : "Infinity", > > > > > > "max" : "-Infinity", > > > > > > "total" : 0.0, > > > > > > "mean" : 0.0 > > > > > > } > > > > > > > > > > > > ``` > > > > > > > > > > > > .. .. > > > > > > .. > > > > > > .. > > > > > > > > > > > > I've truncated the output and have shown only the relevant parts. > > > > > > I'm > > > > > > not where do I look at to solve the problem. > > > > > > > > > > > > -- > > > > > > Regards, > > > > > > Abhijeet Rastogi (shadyabhi) > > > > > > [http://blog.abhijeetr.com](http://blog.abhijeetr.com) > > > > > > > > > > -- > > > > > Regards, > > > > > Abhijeet Rastogi (shadyabhi) > > > > > [http://blog.abhijeetr.com](http://blog.abhijeetr.com) > > > > > > > > -- > > > > Regards, > > > > Abhijeet Rastogi (shadyabhi) > > > > [http://blog.abhijeetr.com](http://blog.abhijeetr.com) > > > > > > -- > > > Regards, > > > Abhijeet Rastogi (shadyabhi) > > > [http://blog.abhijeetr.com](http://blog.abhijeetr.com) > > > > -- > > You received this message because you are subscribed to the Google > > Groups > > "elasticsearch" group. > > To unsubscribe from this group and stop receiving emails from it, send > > an > > email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com) \. > > For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). > > -- > Regards, > Abhijeet Rastogi (shadyabhi) > [http://blog.abhijeetr.com](http://blog.abhijeetr.com) -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![shadyabhi](https://avatars.discourse-cdn.com/v4/letter/s/edb3f5/32.png) [@shadyabhi](https://discuss.elastic.co/u/shadyabhi)\ **Post date:** [April 19, 2013, 11:14am UTC](https://discuss.elastic.co/t/getting-infinity-and-infinity-in-terms-stats-query-what-does-it-mean/11612/8 "2013-04-19T11:14:56Z")
I feel awesome. Thanks to you, Igor. Everything works perfectly now. 🙂 On Fri, Apr 19, 2013 at 4:14 PM, Igor Motov [imotov@gmail.com](mailto:imotov@gmail.com) wrote: > Oh, this is a good one! Not sure why I didn't catch it when I looked at your > mapping the first time. When you specify "@fields.size" it can point to one > of two things depending on the context: 1) the field with the name > "@fields.size" and 2) the field "size" inside the field "@fields". It looks > like your data look like this: > > "fields" : { > "size": 12345 > .... > } > > So, you need to setup mapping for the second case. Therefore, the mapping in > your template should look like this: > > "properties" : { > "@fields": { > "type": "object", > "dynamic": true, > "path": "full", > "properties": { > "syslog\_message" : { "type" : "string", "analyzer" : > "whitespace" }, > "size" : { "type" : "long" , "index" : "not\_analyzed"} > } > }, > "@source" : { "type" : "string", "index" : "not\_analyzed" }, > "@source\_host" : { "type" : "string", "index" : "not\_analyzed" }, > "@source\_path" : { "type" : "string", "index" : "not\_analyzed" }, > "@timestamp" : { "type" : "date", "index" : "not\_analyzed" }, > "@type" : { "type" : "string", "index" : "not\_analyzed" }, > "@message" : { "type" : "string", "analyzer" : "standard" } > } > > On Friday, April 19, 2013 5:52:07 AM UTC-4, Abhijeet Rastogi wrote: > > > Hi Igor, > > > > Thanks for your reply. I've found the root cause of it and I would > > really appreciate if you help me understanding what happened! > > > > working\_template.json: [http://pb.abhijeetr.com/jeNV](http://pb.abhijeetr.com/jeNV) > > working\_mapping.json (of newly created index): > > [http://pb.abhijeetr.com/JLMH](http://pb.abhijeetr.com/JLMH) > > > > Diff: > > > > non\_working\_template.json: [http://pb.abhijeetr.com/KSWd](http://pb.abhijeetr.com/KSWd) > > non\_working\_mapping.json (of newly created index): > > [http://pb.abhijeetr.com/XXBF](http://pb.abhijeetr.com/XXBF) > > > > Diffs for quick view: > > > > ## $ diff working\_template.json non\_working\_template.json 33,34c33 \< "path\_match": "@fields.\*", \< "path\_unmatch": "@fields.size" > > > > > ``` > > > "path_match": "@fields.*" > > > > > > ``` > > > > ## $ diff working\_mapping.json non\_working\_mapping.json 9,10c9 \< "path\_match" : "@fields.\*", \< "path\_unmatch" : "@fields.size" > > > > > ``` > > > "path_match" : "@fields.*" > > > > > > ``` > > > > ## 50c49,52 \< "type" : "string" > > > > > ``` > > > "type" : "string", > > > "index" : "not_analyzed", > > > "omit_norms" : true, > > > "index_options" : "docs" > > > > > > ``` > > > > Doubts: > > > > - In your other thread, you mentioned that if I provide something in > > properties, the dynamic template won't be applied to it. This doesn't > > look like the case because I can see size type as string in > > [http://pb.abhijeetr.com/JLMH](http://pb.abhijeetr.com/JLMH) (working\_mapping.json). But, I also see > > @fields.size as long in the same mapping. I don't understand the > > reason b/w the two. If I don't mention size in path\_unmatch, I also > > start getting Infinity/-Infinity in facet queries. I would really > > appreciate the help here. > > > > - Why do we have "size" and "@fields.size" separately? One says as > > string and the other as long, I am really lost here. > > > > On Fri, Apr 19, 2013 at 1:31 AM, Igor Motov [imo...@gmail.com](mailto:imo...@gmail.com) wrote: > > > > > If you don't see fields.size in the source, it means this field wasn't > > > there > > > when you sent the records for indexing. So, you need to go upstream and > > > figure out why application that is feeding elasticsearch with data > > > doesn't > > > populate this field. > > > > > > On Thursday, April 18, 2013 2:38:46 PM UTC-4, Abhijeet Rastogi wrote: > > > > > > > I feel bad to bump this thread, but anyone? I'm really clueless here. > > > > > > > > On Thu, Apr 18, 2013 at 12:08 AM, Abhijeet Rastogi > > > > [abhije...@gmail.com](mailto:abhije...@gmail.com) > > > > wrote: > > > > > > > > > Sorry for one more mail guys.. By writing " I can't execute a lucene > > > > > query", what I actually meant was I don't get any search results. > > > > > Silly me. > > > > > > > > > > On Thu, Apr 18, 2013 at 12:02 AM, Abhijeet Rastogi > > > > > [abhije...@gmail.com](mailto:abhije...@gmail.com) > > > > > wrote: > > > > > > > > > > > One thing I noticed is, I can't execute a lucene query (meaning > > > > > > query\_string type query) like > > > > > > > > > > > > _exists_:"@fields.size" > > > > > > > > > > > > But, I can do that for other fields. What can be the reason for that? > > > > > > Also, when I do a simple matchall query with size as 10, I can see > > > > > > all > > > > > > fields being returned except "@fields.size", what exactly might have > > > > > > happened to this field? > > > > > > > > > > > > This is how my template looks like: [http://pb.abhijeetr.com/jaVK](http://pb.abhijeetr.com/jaVK) > > > > > > > > > > > > I would really appreciate a quick help here. This one is driving me > > > > > > crazy. > > > > > > > > > > > > On Wed, Apr 17, 2013 at 3:45 PM, Abhijeet Rastogi > > > > > > [abhije...@gmail.com](mailto:abhije...@gmail.com) > > > > > > wrote: > > > > > > > > > > > > > Hi all, > > > > > > > > > > > > > > I'm doing a simple query like: > > > > > > > > > > > > > > curl -XPOST > > > > > > > '[http://localhost:9200/logstash-2013.04.17/\_search?pretty](http://localhost:9200/logstash-2013.04.17/_search?pretty)' > > > > > > > -d '{ > > > > > > > "query": { > > > > > > > "match\_all": { } > > > > > > > }, > > > > > > > "facets" : { > > > > > > > "domain\_size" : { > > > > > > > "terms\_stats" : { > > > > > > > "key\_field" : "@fields.from", > > > > > > > "value\_field" : "@fields.size" > > > > > > > } > > > > > > > } > > > > > > > } > > > > > > > }' > > > > > > > > > > > > > > In this, @fields.size is a long and @fields.from is a string which > > > > > > > is > > > > > > > non\_analyzed. > > > > > > > > > > > > > > I get results like: > > > > > > > "domain\_size" : { > > > > > > > "\_type" : "terms\_stats", > > > > > > > "missing" : 622069, > > > > > > > "terms" : [ { > > > > > > > "term" : "", > > > > > > > "count" : 10689, > > > > > > > "total\_count" : 0, > > > > > > > "min" : "Infinity", > > > > > > > "max" : "-Infinity", > > > > > > > "total" : 0.0, > > > > > > > "mean" : 0.0 > > > > > > > }, { > > > > > > > "term" : "[ema...@domain.com](mailto:ema...@domain.com)", > > > > > > > > > > > > > > ``` > > > > > > > "count" : 6931, > > > > > > > "total_count" : 0, > > > > > > > "min" : "Infinity", > > > > > > > "max" : "-Infinity", > > > > > > > "total" : 0.0, > > > > > > > "mean" : 0.0 > > > > > > > } > > > > > > > > > > > > > > ``` > > > > > > > > > > > > > > .. .. > > > > > > > .. > > > > > > > .. > > > > > > > > > > > > > > I've truncated the output and have shown only the relevant parts. > > > > > > > I'm > > > > > > > not where do I look at to solve the problem. > > > > > > > > > > > > > > -- > > > > > > > Regards, > > > > > > > Abhijeet Rastogi (shadyabhi) > > > > > > > [http://blog.abhijeetr.com](http://blog.abhijeetr.com) > > > > > > > > > > > > -- > > > > > > Regards, > > > > > > Abhijeet Rastogi (shadyabhi) > > > > > > [http://blog.abhijeetr.com](http://blog.abhijeetr.com) > > > > > > > > > > -- > > > > > Regards, > > > > > Abhijeet Rastogi (shadyabhi) > > > > > [http://blog.abhijeetr.com](http://blog.abhijeetr.com) > > > > > > > > -- > > > > Regards, > > > > Abhijeet Rastogi (shadyabhi) > > > > [http://blog.abhijeetr.com](http://blog.abhijeetr.com) > > > > > > -- > > > You received this message because you are subscribed to the Google > > > Groups > > > "elasticsearch" group. > > > To unsubscribe from this group and stop receiving emails from it, send > > > an > > > email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com). > > > For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). > > > > -- > > Regards, > > Abhijeet Rastogi (shadyabhi) > > [http://blog.abhijeetr.com](http://blog.abhijeetr.com) > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). -- Regards, Abhijeet Rastogi (shadyabhi) [http://blog.abhijeetr.com](http://blog.abhijeetr.com) -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 2:40am UTC](https://discuss.elastic.co/t/getting-infinity-and-infinity-in-terms-stats-query-what-does-it-mean/11612/9 "2017-07-06T02:40:26Z")