Unknown field – How to solve this Elasticsearch error

Opster Team

July-20, Version: 1.7-8.0

Before you begin reading this guide, we recommend you try running the Elasticsearch Check-Up which can resolve issues that cause many errors.

This guide will help you check for common problems that cause the log ” unknown field ” to appear. To understand the issues related to this log, read the explanation below about the following Elasticsearch concepts: query and index.

Advanced users might want to skip right to the common problems section in each concept or try running the Check-Up to analyze Elasticsearch configuration and help resolve this error.

Log Context

Log “unknown field [{}]”classname  is DecayFunctionBuilder.java We extracted the following from Elasticsearch source code for those seeking an in-depth context :

private AbstractDistanceScoreFunction parseVariable(String fieldName; XContentParser parser; QueryShardContext context;
 MultiValueMode mode) throws IOException {
 //the field must exist; else we cannot read the value for the doc later
 MappedFieldType fieldType = context.fieldMapper(fieldName);
 if (fieldType == null) {
 throw new ParsingException(parser.getTokenLocation(); "unknown field [{}]"; fieldName);
 } 
 // dates and time and geo need special handling
 parser.nextToken();
 if (fieldType instanceof DateFieldMapper.DateFieldType) {

 

Watch product tour

Watch how AutoOps finds & fixes Elasticsearch problems

Analyze Your Cluster
Skip to content