-
Notifications
You must be signed in to change notification settings - Fork 25
Unable to run queries #14
Comments
I stepped away from working on this for a while after early failures but I'm back at it again. I have the most recent pull but I still get the same results. Here's the output from _internal 09-18-2018 11:05:48.633 -0400 ERROR ScriptRunner - stderr from '/opt/splunk/bin/python /opt/splunk/etc/apps/elasticsplunk/bin/elasticsplunk.py GETINFO eaddr="http://localhost:9200" tsfield="@timestamp" index="logs-2018-09-18" query="directionName:Local" limit="50"': 2018-09-18 11:05:48,633, Level=DEBUG, Pid=5187, Logger=splunklib, File=search_command.py, Line=624, ElasticSplunk.process finished under protocol_version=1 |
@ananer |
I am able to run the following and get results returned:
| ess eaddr="http://localhost:9200" action="cluster-health"
| ess eaddr="http://localhost:9200" action="indices-list"
But, when I run something like the below I get no errors and no results returned. When I try the same query from within Kibana get results returned.
| ess eaddr="http://localhost:9200" tsfield=@timestamp index="logs*" query="directionName:Local" limit="50"
Are there expected versions for compatibility? Currently the Lucene version is 6.6.0. Any guidance is appreciated.
The text was updated successfully, but these errors were encountered: