find-erros.clj

(ns find-errors.core
  (:require [clojurewerkz.elastisch.rest :as esr]
            [clojurewerkz.elastisch.rest.document :as esd]
            [clojurewerkz.elastisch.query :as q]
            [clojurewerkz.elastisch.rest.response :as esrsp]))

(defn -main
  [& args]
  (esr/connect! "http://elasaticsearch:9200")
  (let [res
        (esd/search "*" "service-log"
                    :query (q/filtered
                            :query (q/text "@message" "Something interesting")
                            :filter {:and [{:term {"@source" "UserHistory"}}
                                           {:term {"@fields.category" "Category"}}]})
                    :size 10000)]
    (doseq [hit (esrsp/hits-from res)] (println (get-in hit [:_source (keyword "@fields") :field])))))