版本： 8.9-8.9
简而言之，当 Elasticsearch 尝试执行需要 [maxspan] 参数的序列查询但未提供该参数时，会出现此错误。[maxspan] 参数用于指定事件序列应发生的最大时间跨度。要解决此问题，您应该在序列查询中包含 [maxspan] 参数。确保以正确的格式指定它，例如 “1h”、“15m”、“30s” 等时间值。
日志上下文 #
日志 “[maxspan] is required for sequences with missing events queries; found none” 的类名是 LogicalPlanBuilder.java。我们从 Elasticsearch 源代码中提取了以下内容，供那些寻求深入上下文的人参考：
} else {
until = defaultUntil(source);
} if (maxSpan.duration() < 0 && queries.stream().anyMatch(x -> x.isMissingEventFilter())) {
throw new ParsingException(source; "[maxspan] is required for sequences with missing events queries; found none");
} if (queries.stream().allMatch(KeyedFilter::isMissingEventFilter)) {
throw new IllegalStateException("A sequence requires at least one positive event query; found none");
}
