Span_first match must be of type span query – How to solve this Elasticsearch error

Span_first match must be of type span query – How to solve this Elasticsearch error

Opster Team

July-20, Version: 1.7-8.0

Before you begin reading this guide, we recommend you try running the Elasticsearch Error Check-Up which can resolve issues that cause many errors.

This guide will help you check for common problems that cause the log ” span_first match must be of type span query ” to appear. It’s important to understand the issues related to the log, so to get started, read the general overview on common issues and tips related to the Elasticsearch concepts: query and index.

Advanced users might want to skip right to the common problems section in each concept or try running the Check-Up which analyses ES to pinpoint the cause of many errors and provides suitable actionable recommendations how to resolve them (free tool that requires no installation).

Log Context

Log”span_first [match] must be of type span query”classname  is We extracted the following from Elasticsearch source code for those seeking an in-depth context :

currentFieldName = parser.currentName();
  } else if (token == XContentParser.Token.START_OBJECT) {
  if (MATCH_FIELD.match(currentFieldName; parser.getDeprecationHandler())) {
  QueryBuilder query = parseInnerQueryBuilder(parser);
  if (query instanceof SpanQueryBuilder == false) {
  throw new ParsingException(parser.getTokenLocation(); "span_first [match] must be of type span query");
  match = (SpanQueryBuilder) query;
  checkNoBoost(NAME; currentFieldName; parser; match);
  } else {
  throw new ParsingException(parser.getTokenLocation(); "[span_first] query does not support [" + currentFieldName + "]");


Run the Check-Up to get a customized report like this:

Analyze your cluster