error field "message" was indexed without position data

[arteta22000]

Sorry for my english.

In Kibana, I got this error by clicking on "add filter to match this value", field: message. I also have with other fields
I use this template with elasticsearch 0.90.7:
-> https://gist.github.com/untergeek/7359994

The problem is the template?

Thanks !

[arteta22000]

Hi all,

anyone ?

Here are ElasticSearch logs:

[2013-11-20 14:05:46,221][DEBUG][action.search.type ] [racinecubix] [logstash-2013.11.20][0], node[ohB87vg0SfeCUawFzVGCGw], [P], s[STARTED]: Failed to execute [org.elasticsearch.action.search.SearchRequest@457f3d9c]
org.elasticsearch.search.query.QueryPhaseExecutionException: [logstash-2013.11.20][0]: query[filtered(ConstantScore(:))->BooleanFilter(+: +cache(@timestamp:[1384909566606 TO 1384952746217]) +cache(QueryWrapperFilter(type:squid3 type:log)) +cache(QueryWrapperFilter((path:"var log squid3 access.log"))) +BooleanFilter(+:))],from[0],size[500],sort[<custom:"@timestamp": org.elasticsearch.index.fielddata.fieldcomparator.LongValuesComparatorSource@e8af781>!]: Query Failed [Failed to execute main query]
at org.elasticsearch.search.query.QueryPhase.execute(QueryPhase.java:123)
at org.elasticsearch.search.SearchService.executeFetchPhase(SearchService.java:302)
at org.elasticsearch.search.action.SearchServiceTransportAction.sendExecuteFetch(SearchServiceTransportAction.java:304)
at org.elasticsearch.action.search.type.TransportSearchQueryAndFetchAction$AsyncAction.sendExecuteFirstPhase(TransportSearchQueryAndFetchAction.java:71)
at org.elasticsearch.action.search.type.TransportSearchTypeAction$BaseAsyncAction.performFirstPhase(TransportSearchTypeAction.java:216)
at org.elasticsearch.action.search.type.TransportSearchTypeAction$BaseAsyncAction.performFirstPhase(TransportSearchTypeAction.java:203)
at org.elasticsearch.action.search.type.TransportSearchTypeAction$BaseAsyncAction$2.run(TransportSearchTypeAction.java:186)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1146)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at java.lang.Thread.run(Thread.java:679)
Caused by: java.lang.IllegalStateException: field "path" was indexed without position data; cannot run PhraseQuery (term=var)
at org.apache.lucene.search.PhraseQuery$PhraseWeight.scorer(PhraseQuery.java:273)
at org.apache.lucene.search.QueryWrapperFilter$1.iterator(QueryWrapperFilter.java:59)
at org.elasticsearch.common.lucene.docset.DocIdSets.toCacheable(DocIdSets.java:79)
at org.elasticsearch.index.cache.filter.weighted.WeightedFilterCache$FilterCacheFilterWrapper.getDocIdSet(WeightedFilterCache.java:171)
at org.elasticsearch.common.lucene.search.XBooleanFilter.getDocIdSet(XBooleanFilter.java:83)
at org.elasticsearch.common.lucene.search.ApplyAcceptedDocsFilter.getDocIdSet(ApplyAcceptedDocsFilter.java:45)
at org.apache.lucene.search.ConstantScoreQuery$ConstantWeight.scorer(ConstantScoreQuery.java:131)
at org.apache.lucene.search.IndexSearcher.search(IndexSearcher.java:624)
at org.elasticsearch.search.internal.ContextIndexSearcher.search(ContextIndexSearcher.java:167)
at org.apache.lucene.search.IndexSearcher.search(IndexSearcher.java:587)
at org.apache.lucene.search.IndexSearcher.search(IndexSearcher.java:539)
at org.apache.lucene.search.IndexSearcher.search(IndexSearcher.java:510)
at org.apache.lucene.search.IndexSearcher.search(IndexSearcher.java:345)
at org.elasticsearch.search.query.QueryPhase.execute(QueryPhase.java:112)
... 9 more
[2013-11-20 14:05:46,222][DEBUG][action.search.type ] [racinecubix] All shards failed for phase: [query_fetch]
[2013-11-20 14:05:46,225][DEBUG][action.search.type ] [racinecubix] [logstash-2013.11.20][0], node[ohB87vg0SfeCUawFzVGCGw], [P], s[STARTED]: Failed to execute [org.elasticsearch.action.search.SearchRequest@24a5f069]
org.elasticsearch.search.query.QueryPhaseExecutionException: [logstash-2013.11.20][0]: query[ConstantScore(:)],from[0],size[0]: Query Failed [Failed to execute global facets]
at org.elasticsearch.search.facet.FacetPhase.execute(FacetPhase.java:188)
at org.elasticsearch.search.query.QueryPhase.execute(QueryPhase.java:131)
at org.elasticsearch.search.SearchService.executeFetchPhase(SearchService.java:302)
at org.elasticsearch.search.action.SearchServiceTransportAction.sendExecuteFetch(SearchServiceTransportAction.java:304)
at org.elasticsearch.action.search.type.TransportSearchQueryAndFetchAction$AsyncAction.sendExecuteFirstPhase(TransportSearchQueryAndFetchAction.java:71)
at org.elasticsearch.action.search.type.TransportSearchTypeAction$BaseAsyncAction.performFirstPhase(TransportSearchTypeAction.java:216)
at org.elasticsearch.action.search.type.TransportSearchTypeAction$BaseAsyncAction.performFirstPhase(TransportSearchTypeAction.java:203)
at org.elasticsearch.action.search.type.TransportSearchTypeAction$BaseAsyncAction$2.run(TransportSearchTypeAction.java:186)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1146)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at java.lang.Thread.run(Thread.java:679)
Caused by: java.lang.IllegalStateException: field "path" was indexed without position data; cannot run PhraseQuery (term=var)
at org.apache.lucene.search.PhraseQuery$PhraseWeight.scorer(PhraseQuery.java:273)
at org.apache.lucene.search.QueryWrapperFilter$1.iterator(QueryWrapperFilter.java:59)
at org.elasticsearch.common.lucene.docset.DocIdSets.toCacheable(DocIdSets.java:79)
at org.elasticsearch.index.cache.filter.weighted.WeightedFilterCache$FilterCacheFilterWrapper.getDocIdSet(WeightedFilterCache.java:171)
at org.elasticsearch.common.lucene.search.XBooleanFilter.getDocIdSet(XBooleanFilter.java:83)
at org.elasticsearch.common.lucene.search.ApplyAcceptedDocsFilter.getDocIdSet(ApplyAcceptedDocsFilter.java:45)
at org.apache.lucene.search.ConstantScoreQuery$ConstantWeight.scorer(ConstantScoreQuery.java:131)
at org.apache.lucene.search.QueryWrapperFilter$1.iterator(QueryWrapperFilter.java:59)
at org.elasticsearch.common.lucene.docset.DocIdSets.toSafeBits(DocIdSets.java:130)
at org.elasticsearch.common.lucene.search.FilteredCollector.setNextReader(FilteredCollector.java:69)
at org.apache.lucene.search.IndexSearcher.search(IndexSearcher.java:618)
at org.elasticsearch.search.internal.ContextIndexSearcher.search(ContextIndexSearcher.java:167)
at org.apache.lucene.search.IndexSearcher.search(IndexSearcher.java:309)
at org.elasticsearch.search.facet.FacetPhase.execute(FacetPhase.java:186)
... 10 more
[2013-11-20 14:05:46,226][DEBUG][action.search.type ] [racinecubix] All shards failed for phase: [query_fetch]

Thanks for any advice!

[rashidkpc]

This was an issue in the template that has since been fixed in logstash 1.3.2