Elasticsearch quering

  • What Grafana version and what operating system are you using?

  • What are you trying to achieve?
    {
    “aggs”: {
    “0”: {
    “terms”: {
    “field”: “component.keyword”,
    “order”: {
    “_count”: “desc”
    },
    “size”: 5
    },
    “aggs”: {
    “1”: {
    “terms”: {
    “field”: “levelname.keyword”,
    “order”: {
    “_count”: “desc”
    },
    “size”: 3
    }
    }
    }
    }
    },
    “size”: 0,
    “fields”: [
    {
    “field”: “@timestamp”,
    “format”: “date_time”
    },
    {
    “field”: “asctime”,
    “format”: “date_time”
    }
    ],
    “script_fields”: {},
    “stored_fields”: [
    “*”
    ],
    “runtime_mappings”: {},
    “_source”: {
    “excludes”:
    },
    “query”: {
    “bool”: {
    “must”: ,
    “filter”: [
    {
    “match_phrase”: {
    “levelname.keyword”: “ERROR”
    }
    },
    {
    “range”: {
    @timestamp”: {
    “format”: “strict_date_optional_time”,
    “gte”: “2022-08-21T21:00:00.000Z”,
    “lte”: “2022-11-20T17:07:14.296Z”
    }
    }
    }
    ],
    “should”: ,
    “must_not”:
    }
    }
    }

  • How are you trying to achieve it?

  • What happened?

  • What did you expect to happen?

  • Can you copy/paste the configuration(s) that you are having problems with?

  • Did you receive any errors in the Grafana UI or in related logs? If so, please tell us exactly what they were.

  • Did you follow any online instructions? If so, what is the URL?

Not much to work with here?