Problem with Elasticsearch query - [range] malformed query, expected [END_OBJECT] but found [FIELD_NAME]

Question

I am unable to figure out what is wrong with below query.

GET website/_search
{
  "query": {
    "bool": { 
      "filter": [
        {
          "range": {
            "@timestamp": {
            "gte": "now-1d/d",
            "lt": "now/d"
            }
          },
          "match": {
            "aspnet-request-url.keyword": "abc.com/Default.aspx"
          }
        }
      ] 
    }
  }
}

Both range and match are working fine independently.

As per documentation, it says when merging more than one query we should use either must , filter, must-not under bool query.

Still it is giving [range] malformed query, expected [END_OBJECT] but found [FIELD_NAME].

Any help is appreciated.

Bhavya · Accepted Answer · 2020-10-28 17:31:20Z

1

[range] malformed query, expected [END_OBJECT] but found [FIELD_NAME]

It is clear from the above error, that the query is not properly formed. Please refer to this to know more about the structure of the query and filter context.

You are missing some brackets, try out the below search query

{
  "query": {
    "bool": {
      "filter": [
        {
          "range": {
            "@timestamp": {
              "gte": "now-1d/d",
              "lt": "now/d"
            }
          }
        },
        {                          <-- note this
          "match": {
            "aspnet-request-url.keyword": "abc.com/Default.aspx"
          }
        }
      ]
    }
  }
}

edited Oct 28, 2020 at 17:31

answered Oct 28, 2020 at 17:24

Bhavya

16.2k3 gold badges23 silver badges52 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

IgnitedMind Over a year ago

Hey Bhavya, Thanks for the quick response. Yes it is correct.

Collectives™ on Stack Overflow

Problem with Elasticsearch query - [range] malformed query, expected [END_OBJECT] but found [FIELD_NAME]

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related