forked from sevnote/sevnote-api
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathrun.log
67 lines (67 loc) · 71.5 KB
/
run.log
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
listening :3500
[90mPOST /GetSearchResult [32m200 [90m100.519 ms - 265872[0m
[90mPOST /GetSearchResult [32m200 [90m2.934 ms - 48[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m27.974 ms - 118[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m19.951 ms - 118[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m22.353 ms - 118[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m26.914 ms - 118[0m
[90mPOST /GetSearchResult [32m200 [90m2.266 ms - 48[0m
[90mPOST /GetSearchResult [32m200 [90m1.622 ms - 48[0m
[90mPOST /GetSearchResult [32m200 [90m1.537 ms - 48[0m
[90mPOST /GetSearchResult [32m200 [90m2.095 ms - 48[0m
[90mPOST /GetSearchResult [32m200 [90m2.125 ms - 48[0m
[90mPOST /GetSearchResult [32m200 [90m1.511 ms - 48[0m
[90mPOST /GetSearchResult [32m200 [90m2.029 ms - 48[0m
[90mPOST /GetSearchResult [32m200 [90m1.388 ms - 48[0m
[90mPOST /GetSearchResult [32m200 [90m2.027 ms - 48[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m29.184 ms - 118[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m18.672 ms - 118[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m32.000 ms - 118[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m26.376 ms - 118[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m35.660 ms - 118[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m28.408 ms - 118[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m20.991 ms - 118[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m19.012 ms - 118[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m23.889 ms - 118[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m15.090 ms - 118[0m
[90mPOST /GetSearchResult [32m200 [90m104.589 ms - 265872[0m
[90mPOST /GetSearchResult [32m200 [90m90.054 ms - 265872[0m
[90mPOST /GetSearchResult [32m200 [90m167.425 ms - 265872[0m
[90mPOST /GetSearchResult [32m200 [90m128.831 ms - 265872[0m
[90mPOST /GetSearchResult [32m200 [90m97.917 ms - 265872[0m
[90mPOST /GetSearchResult [32m200 [90m105.093 ms - 265872[0m
[90mPOST /GetSearchResult [32m200 [90m79.248 ms - 265872[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m28.614 ms - 118[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m22.280 ms - 118[0m
[90mGET /GetEsCountAll?ApiKey=logstack [36m304 [90m22.451 ms - -[0m
[90mGET / [32m200 [90m2.292 ms - 46[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m24.186 ms - 118[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m24.390 ms - 118[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m20.014 ms - 118[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m29.033 ms - 118[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m26.713 ms - 118[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m20.218 ms - 118[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m24.863 ms - 118[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m22.957 ms - 118[0m
[90mPOST /GetSearchResult [32m200 [90m86.860 ms - 265872[0m
[90mPOST /GetLogInfo [32m200 [90m39.544 ms - 585[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m27.680 ms - 118[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m23.663 ms - 118[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m11.818 ms - 115[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m14.110 ms - 115[0m
{ [Error: SearchPhaseExecutionException[Failed to execute phase [query], all shards failed; shardFailures {[Xe6zqTgETFazy_zp90Wv5g][logstack-2014.07.28][9]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[logstack-2014.07.28][9]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][9]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[Xe6zqTgETFazy_zp90Wv5g][log-2014-7][4]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[log-2014-7][4]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[log-2014-7][4]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[Xe6zqTgETFazy_zp90Wv5g][logstack-2014.07.28][0]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[logstack-2014.07.28][0]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][0]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][log-2014-7][3]: SearchParseException[[log-2014-7][3]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[log-2014-7][3]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[Xe6zqTgETFazy_zp90Wv5g][logstack-2014.07.28][6]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[logstack-2014.07.28][6]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][6]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][logstack-2014.07.28][5]: SearchParseException[[logstack-2014.07.28][5]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][5]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][log-2014-7][2]: SearchParseException[[log-2014-7][2]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[log-2014-7][2]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[Xe6zqTgETFazy_zp90Wv5g][log-2014-7][1]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[log-2014-7][1]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[log-2014-7][1]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][logstack-2014.07.28][8]: SearchParseException[[logstack-2014.07.28][8]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][8]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][log-2014-7][0]: SearchParseException[[log-2014-7][0]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[log-2014-7][0]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][logstack-2014.07.28][7]: SearchParseException[[logstack-2014.07.28][7]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][7]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[Xe6zqTgETFazy_zp90Wv5g][logstack-2014.07.28][2]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[logstack-2014.07.28][2]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][2]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][logstack-2014.07.28][1]: SearchParseException[[logstack-2014.07.28][1]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][1]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[Xe6zqTgETFazy_zp90Wv5g][logstack-2014.07.28][4]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[logstack-2014.07.28][4]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][4]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][logstack-2014.07.28][3]: SearchParseException[[logstack-2014.07.28][3]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][3]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }]]
message: 'SearchPhaseExecutionException[Failed to execute phase [query], all shards failed; shardFailures {[Xe6zqTgETFazy_zp90Wv5g][logstack-2014.07.28][9]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[logstack-2014.07.28][9]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][9]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[Xe6zqTgETFazy_zp90Wv5g][log-2014-7][4]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[log-2014-7][4]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[log-2014-7][4]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[Xe6zqTgETFazy_zp90Wv5g][logstack-2014.07.28][0]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[logstack-2014.07.28][0]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][0]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][log-2014-7][3]: SearchParseException[[log-2014-7][3]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[log-2014-7][3]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[Xe6zqTgETFazy_zp90Wv5g][logstack-2014.07.28][6]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[logstack-2014.07.28][6]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][6]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][logstack-2014.07.28][5]: SearchParseException[[logstack-2014.07.28][5]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][5]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][log-2014-7][2]: SearchParseException[[log-2014-7][2]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[log-2014-7][2]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[Xe6zqTgETFazy_zp90Wv5g][log-2014-7][1]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[log-2014-7][1]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[log-2014-7][1]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][logstack-2014.07.28][8]: SearchParseException[[logstack-2014.07.28][8]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][8]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][log-2014-7][0]: SearchParseException[[log-2014-7][0]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[log-2014-7][0]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][logstack-2014.07.28][7]: SearchParseException[[logstack-2014.07.28][7]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][7]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[Xe6zqTgETFazy_zp90Wv5g][logstack-2014.07.28][2]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[logstack-2014.07.28][2]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][2]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][logstack-2014.07.28][1]: SearchParseException[[logstack-2014.07.28][1]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][1]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[Xe6zqTgETFazy_zp90Wv5g][logstack-2014.07.28][4]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[logstack-2014.07.28][4]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][4]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][logstack-2014.07.28][3]: SearchParseException[[logstack-2014.07.28][3]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406532096810}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][3]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406532096810])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }]' }
[90mPOST /GetSearchResult [31m500 [90m33.207 ms - 21[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m16.674 ms - 116[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m13.811 ms - 116[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m13.017 ms - 116[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m12.298 ms - 116[0m
{ [Error: SearchPhaseExecutionException[Failed to execute phase [query], all shards failed; shardFailures {[Xe6zqTgETFazy_zp90Wv5g][logstack-2014.07.28][9]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[logstack-2014.07.28][9]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][9]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[Xe6zqTgETFazy_zp90Wv5g][log-2014-7][4]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[log-2014-7][4]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[log-2014-7][4]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[Xe6zqTgETFazy_zp90Wv5g][logstack-2014.07.28][0]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[logstack-2014.07.28][0]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][0]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][log-2014-7][3]: SearchParseException[[log-2014-7][3]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[log-2014-7][3]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[Xe6zqTgETFazy_zp90Wv5g][logstack-2014.07.28][6]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[logstack-2014.07.28][6]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][6]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][logstack-2014.07.28][5]: SearchParseException[[logstack-2014.07.28][5]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][5]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][log-2014-7][2]: SearchParseException[[log-2014-7][2]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[log-2014-7][2]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[Xe6zqTgETFazy_zp90Wv5g][log-2014-7][1]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[log-2014-7][1]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[log-2014-7][1]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][logstack-2014.07.28][8]: SearchParseException[[logstack-2014.07.28][8]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][8]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][log-2014-7][0]: SearchParseException[[log-2014-7][0]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[log-2014-7][0]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][logstack-2014.07.28][7]: SearchParseException[[logstack-2014.07.28][7]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][7]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[Xe6zqTgETFazy_zp90Wv5g][logstack-2014.07.28][2]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[logstack-2014.07.28][2]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][2]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][logstack-2014.07.28][1]: SearchParseException[[logstack-2014.07.28][1]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][1]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[Xe6zqTgETFazy_zp90Wv5g][logstack-2014.07.28][4]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[logstack-2014.07.28][4]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][4]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][logstack-2014.07.28][3]: SearchParseException[[logstack-2014.07.28][3]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\"alert\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\"/data/logstack/userdata/admin/syslog.log\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][3]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }]]
message: 'SearchPhaseExecutionException[Failed to execute phase [query], all shards failed; shardFailures {[Xe6zqTgETFazy_zp90Wv5g][logstack-2014.07.28][9]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[logstack-2014.07.28][9]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][9]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[Xe6zqTgETFazy_zp90Wv5g][log-2014-7][4]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[log-2014-7][4]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[log-2014-7][4]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[Xe6zqTgETFazy_zp90Wv5g][logstack-2014.07.28][0]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[logstack-2014.07.28][0]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][0]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][log-2014-7][3]: SearchParseException[[log-2014-7][3]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[log-2014-7][3]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[Xe6zqTgETFazy_zp90Wv5g][logstack-2014.07.28][6]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[logstack-2014.07.28][6]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][6]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][logstack-2014.07.28][5]: SearchParseException[[logstack-2014.07.28][5]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][5]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][log-2014-7][2]: SearchParseException[[log-2014-7][2]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[log-2014-7][2]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[Xe6zqTgETFazy_zp90Wv5g][log-2014-7][1]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[log-2014-7][1]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[log-2014-7][1]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][logstack-2014.07.28][8]: SearchParseException[[logstack-2014.07.28][8]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][8]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][log-2014-7][0]: SearchParseException[[log-2014-7][0]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[log-2014-7][0]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][logstack-2014.07.28][7]: SearchParseException[[logstack-2014.07.28][7]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][7]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[Xe6zqTgETFazy_zp90Wv5g][logstack-2014.07.28][2]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[logstack-2014.07.28][2]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][2]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][logstack-2014.07.28][1]: SearchParseException[[logstack-2014.07.28][1]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][1]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[Xe6zqTgETFazy_zp90Wv5g][logstack-2014.07.28][4]: RemoteTransportException[[node_3][inet[/10.4.11.114:9300]][search/phase/query]]; nested: SearchParseException[[logstack-2014.07.28][4]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][4]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }{[FY0X3r5DS2uxaBoI02yTKg][logstack-2014.07.28][3]: SearchParseException[[logstack-2014.07.28][3]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"filtered":{"query":{"query_string":{"query":"*"}},"filter":{"bool":{"must":[{"fquery":{"query":{"query_string":{"query":"\\"alert\\"","default_field":"priority"}}}},{"fquery":{"query":{"query_string":{"query":"\\"/data/logstack/userdata/admin/syslog.log\\"","default_field":"path"}}}},{"range":{"@timestamp":{"from":1388505600000,"to":1406536128679}}}]}}}},"sort":[{"@timestamp":{"order":"desc"}}]}]]]; nested: SearchParseException[[logstack-2014.07.28][3]: query[ConstantScore(BooleanFilter(+QueryWrapperFilter((priority:alert)) +QueryWrapperFilter((path:"data logstack userdata admin syslog.log")) +cache(@timestamp:[1388505600000 TO 1406536128679])))],from[-1],size[-1]: Parse Failure [No mapping found for [@timestamp] in order to sort on]]; }]' }
[90mPOST /GetSearchResult [31m500 [90m42.387 ms - 21[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m15.752 ms - 116[0m
[90mPOST /GetSearchResult [32m200 [90m26.906 ms - 77[0m
[90mPOST /GetSearchResult [32m200 [90m27.256 ms - 77[0m
[90mPOST /GetSearchResult [32m200 [90m24.280 ms - 77[0m
[90mPOST /GetSearchResult [32m200 [90m22.470 ms - 77[0m
[90mGET /GetEsCountAll?ApiKey=logstack [32m200 [90m18.387 ms - 116[0m