ES /docs

Elasticsearch::Transport::Transport::Errors::BadRequest: [400] {"error":{"root_cause":[{"type":"parsing_exception","reas

Service
cupixworks-api
Occurrences
10
Status
Reported
Confidence
85%
Actionability
44%
Cluster ID
684addd1-a1bc-44ee-96cb-427dc40d2306
First Seen
2026-07-24 07:26 UTC
Last Seen
2026-08-06 15:14 UTC
Datadog↗ Slack↗
Actions

Elasticsearch::Transport::Transport::Errors::BadRequest: [400] {"error":{"root_cause":[{"type":"parsing_exception","reas

What Happened#

cupixworks-api (tesla) 의 검색 엔드포인트(GET /api/v1/reviews, GET /api/v1/admin/quotes)에서 클라이언트가 q 파라미터를 scalar 문자열이 아니라 중첩 object (q[s]=..., q[number]=...) 로 보냈다. tesla 는 params[:q] 를 그대로 Elasticsearch multi_match 쿼리의 query 필드에 넣어, ES 가 [multi_match] unknown token [START_OBJECT] after [query] parsing_exception (HTTP 400) 을 반환했고, 이것이 tesla 에서 HTTP 502 로 표면화됐다. 14일 창 7건 전부 내부 테스트 트래픽(curl/Python-urllib, dev/qa 환경)이며 프로덕션/실사용자 영향은 관측되지 않았다.

Quick Facts#

Field Value
exception.class Elasticsearch::Transport::Transport::Errors::BadRequest
exception.message [400] ... parsing_exception "[multi_match] unknown token [START_OBJECT] after [query]" ... "[bool] failed to parse field [must]"
top_frame lib/cupix/query_option/base.rb:157-165 (set_search_string)
runtime Ruby on Rails (tesla), Elasticsearch (elasticsearch-model)
deploy origin/master @ 5d437c17 (Merged PR 89570, 2026-08-06)
env dev, qa (us-west-2)

Affected Teams#

Team / Domain Error Count Impact
cupix (dev) 4 GET /api/v1/reviews 502 (내부 테스트, curl/8.7.1)
admin (qa) 3 GET /api/v1/admin/quotes 502 (내부 테스트, Python-urllib/curl)

프로덕션 tenant 발생 없음. 전부 내부 테스트 클라이언트.

Timeline#

  1. 2026-07-24 16:26 KST — 최초 발생: GET /api/v1/admin/quotes (qa), q[number_eq]=... 중첩 object 입력 (col:60)
  2. 2026-08-03 20:47 ~ 21:20 KST — GET /api/v1/reviews (dev), q[s]=published_at desc 중첩 object 입력 버스트 (col:666)
  3. 2026-08-07 00:14 KST — 최근 발생 (cluster last_seen)
  4. 2026-08-07 — RCA 분석 수행

Scoring#

Confidence 85% · Actionability 44%

Confidence#

Dimension Score Detail
Evidence completeness 5/5 17 code refs, 3 log queries
Code path explicitness 3/3 17 file:line refs
Log evidence 3/3 section, query, pattern
RCA structure 3/3 3/3 sections
Revision history 0/3 0 revision(s)
Agent execution 3/3 success

Actionability#

Dimension Score Detail
Fix complexity 5/5 trivial
Affected files 1/5 16 file(s)
Single repo 1/3 2 service(s)
Immediate actions 0/3 absent
Testability 0/3 no test info
External dependency 1/3 external deps found
Data migration 3/3 no migration