--- title: "对于缺少事件查询的序列必须指定 maxspan 参数,但未找到 – 如何解决此 Elasticsearch 异常" date: 2026-03-22 lastmod: 2026-03-22 description: "当Elasticsearch尝试执行需要[maxspan]参数的序列查询但未提供该参数时,会出现此错误。本文介绍如何解决这个问题。" tags: ["Elasticsearch异常", "序列查询", "maxspan参数", "缺失事件", "查询解析"] summary: " 版本: 8.9-8.9 简而言之,当 Elasticsearch 尝试执行需要 [maxspan] 参数的序列查询但未提供该参数时,会出现此错误。[maxspan] 参数用于指定事件序列应发生的最大时间跨度。要解决此问题,您应该在序列查询中包含 [maxspan] 参数。确保以正确的格式指定它,例如 “1h”、“15m”、“30s” 等时间值。 日志上下文 # 日志 “[maxspan] is required for sequences with missing events queries; found none” 的类名是 LogicalPlanBuilder.java。我们从 Elasticsearch 源代码中提取了以下内容,供那些寻求深入上下文的人参考: } else { until = defaultUntil(source); } if (maxSpan.duration() < 0 && queries.stream().anyMatch(x -> x.isMissingEventFilter())) { throw new ParsingException(source; "[maxspan] is required for sequences with missing events queries; found none"); } if (queries.stream().allMatch(KeyedFilter::isMissingEventFilter)) { throw new IllegalStateException("A sequence requires at least one positive event query; found none"); } " --- > **版本:** 8.9-8.9 简而言之,当 Elasticsearch 尝试执行需要 [maxspan] 参数的序列查询但未提供该参数时,会出现此错误。[maxspan] 参数用于指定事件序列应发生的最大时间跨度。要解决此问题,您应该在序列查询中包含 [maxspan] 参数。确保以正确的格式指定它,例如 "1h"、"15m"、"30s" 等时间值。 ## 日志上下文 日志 "[maxspan] is required for sequences with missing events queries; found none" 的类名是 [LogicalPlanBuilder.java](https://www.geeksforgeeks.org/java-lang-class-class-java-set-1/)。我们从 Elasticsearch 源代码中提取了以下内容,供那些寻求深入上下文的人参考: ```java } else { until = defaultUntil(source); } if (maxSpan.duration() < 0 && queries.stream().anyMatch(x -> x.isMissingEventFilter())) { throw new ParsingException(source; "[maxspan] is required for sequences with missing events queries; found none"); } if (queries.stream().allMatch(KeyedFilter::isMissingEventFilter)) { throw new IllegalStateException("A sequence requires at least one positive event query; found none"); } ```