Elasticsearch error and not restarting

  • Used Zammad version: Zammad Version 2.7.x
  • Used Zammad installation source: (source, package, …)
  • Operating system: Ubuntu 16.04.5 LTS
  • Browser + version: Version 70.0.3538.102 (Offizieller Build) (64-Bit)

Issue: We are not able to restart Elastic search. It always crashes and gives us always following Error Message:

[2018-11-13T10:07:30,706][DEBUG][o.e.a.s.TransportSearchAction] [K8ZGOff] [xxxx.de_zammad_production][… Failed to execute [SearchRequest{sea
_ “from” : 0,_
_ “size” : 100,_
_ “query” : {_
_ “bool” : {_
_ “must” : [_
_ {_
_ “query_string” : {_
_ “query” : "xxxxxx@xx.de" xxxxx@xx.de, xxxx xxxx xxxxx@xxx.de, *",_
_ “fields” : [ ],_
_ “use_dis_max” : true,_
_ “tie_breaker” : 0.0,_
_ “default_operator” : “and”,_
_ “auto_generate_phrase_queries” : false,_
_ “max_determinized_states” : 10000,_
_ “enable_position_increments” : true,_
_ “fuzziness” : “AUTO”,_
_ “fuzzy_prefix_length” : 0,_
_ “fuzzy_max_expansions” : 50,_
_ “phrase_slop” : 0,_
_ “analyze_wildcard” : true,_
_ “escape” : false,_
_ “split_on_whitespace” : true,_
_ “boost” : 1.0_
_ }_
_ }_
_ ],_
12:05 PM
Caused by: org.apache.lucene.queryparser.classic.TokenMgrError: Lexical error at line 1, column 138. Encountered: after : “” xxxx@xx.de, *"
_

It seems there is an extra double quote (in a query) " of E-Mail addresses causing the crash which is not escaped correctly? I am not an elasticsearch expert unfortunately…Maybe anyone can help?

Thank You!

we could fix it .It seems it was a elasticsearch configuration which needed to be changed. Its working again

This topic was automatically closed 120 days after the last reply. New replies are no longer allowed.