Runtime Error on Terms Aggregation using Split Function

[Willian_Fuks]

Hello,

I just asked for help at SO and decided to ask here as well.

I'm using a docker image ES 6.2.3 and a Python client to interact with ES.

Created a mapping for testing like so:

mapping = {
    'settings': {
        'number_of_shards': 1,
        'number_of_replicas': 0,
    },
    'mappings': {
        '_doc': {
            'properties': {
                'cat': {
                    'type': 'keyword',
                }
            }
        }
    }
}

Indexed some documets:

es.index('test_ind', '_doc', body={'cat': 'cat1,cat2,cat3'})
es.index('test_ind', '_doc', body={'cat': 'cat1,cat2,cat4'})

And tried running a terms aggregation by using a split operation on commas:

facet = {                                                                 
    "_source": ["cat"],
    "aggs": {
        "test": {
            "terms": {
                "script": {
                    "source": "doc['cat'].value.split(',')[0]",
                }
            }
        }
    }
}

r = es.search('test_ind', '_doc', body=facet)

But as it turns out, this error message raises:

TransportError: TransportError(500, 'search_phase_execution_exception', 'runtime error')

Looking at our logs for ES, just found this message in the docker image:

2018-04-29T06:20:39.871+0000: 137707.242: Total time for which application threads were stopped: 0.0077604 seconds, Stopping threads took: 0.0000672 seconds
2018-04-29T06:21:29.949+0000: 137757.320: [GC (Allocation Failure) 2018-04-29T06:21:29.949+0000: 137757.320: [ParNew
Desired survivor size 17432576 bytes, new threshold 6 (max 6)
- age   1:    4312504 bytes,    4312504 total
- age   2:     613880 bytes,    4926384 total
- age   3:       3088 bytes,    4929472 total
- age   4:       1536 bytes,    4931008 total
- age   5:      20752 bytes,    4951760 total
- age   6:       2576 bytes,    4954336 total
: 276935K->5314K(306688K), 0.0061500 secs] 757743K->486122K(1014528K), 0.0062660 secs] [Times: user=0.02 sys=0.00, real=0.00 secs] 

If I remove the split operation then it works normally. I wonder if anyone knows what can be causing this issue.

If you need any more info please let me know,

Thanks.