title: can't figure our error 400 for elasticsearch query
body: <p>I'm just trying to use elastic search and I ran this query:</p>
  
  <pre><code>curl -XPOST "http://host/logstash-2016.05.19/_search" -d'
  
  {
    "query": {
          { "match": { "serviceName": "systemA" } }
    }
  }'
  </code></pre>
  
  <p>but keep getting this error:</p>
  
  <pre><code>{
     "error": "SearchPhaseExecutionException[Failed to execute phase [query], all shards failed; shardFailures {[hTYqYg0RSt2XZrYWxwMQ3g][logstash-2016.05.19][0]: RemoteTransportException[[es1][inet[/10.149.76.25:9300]][indices:data/read/search[phase/query]]]; nested: SearchParseException[[logstash-2016.05.19][0]: from[-1],size[-1]: Parse Failure [Failed to parse source [{\n  \"query\": {\n        { \"match\": { \"serviceName\": \"bsHolds\" } }\n  }\n}\n]]]; nested: QueryParsingException[[logstash-2016.05.19] Failed to parse]; nested: JsonParseException[Unexpected character ('{' (code 123)): was expecting either valid name character (for unquoted name) or double-quote (for quoted) to start field name\n at [Source: UNKNOWN; line: 3, column: 10]]; }{[asrIxDjBSJeKvDTT7zfgMQ][logstash-2016.05.19][1]: RemoteTransportException[[es5][inet[/10.149.76.155:9300]][indices:data/read/search[phase/query]]]; nested: SearchParseException[[logstash-2016.05.19][1]: from[-1],size[-1]: Parse Failure [Failed to parse source [{\n  \"query\": {\n        { \"match\": { \"serviceName\": \"bsHolds\" } }\n  }\n}\n]]]; nested: QueryParsingException[[logstash-2016.05.19] Failed to parse]; nested: JsonParseException[Unexpected character ('{' (code 123)): was expecting either valid name character (for unquoted name) or double-quote (for quoted) to start field name\n at [Source: UNKNOWN; line: 3, column: 10]]; }{[asrIxDjBSJeKvDTT7zfgMQ][logstash-2016.05.19][2]: RemoteTransportException[[es5][inet[/10.149.76.155:9300]][indices:data/read/search[phase/query]]]; nested: SearchParseException[[logstash-2016.05.19][2]: from[-1],size[-1]: Parse Failure [Failed to parse source [{\n  \"query\": {\n        { \"match\": { \"serviceName\": \"bsHolds\" } }\n  }\n}\n]]]; nested: QueryParsingException[[logstash-2016.05.19] Failed to parse]; nested: JsonParseException[Unexpected character ('{' (code 123)): was expecting either valid name character (for unquoted name) or double-quote (for quoted) to start field name\n at [Source: UNKNOWN; line: 3, column: 10]]; }{[PwDi_CIiQHmOHp34KdWk0A][logstash-2016.05.19][3]: RemoteTransportException[[es3][inet[/10.149.76.97:9300]][indices:data/read/search[phase/query]]]; nested: SearchParseException[[logstash-2016.05.19][3]: from[-1],size[-1]: Parse Failure [Failed to parse source [{\n  \"query\": {\n        { \"match\": { \"serviceName\": \"bsHolds\" } }\n  }\n}\n]]]; nested: QueryParsingException[[logstash-2016.05.19] Failed to parse]; nested: JsonParseException[Unexpected character ('{' (code 123)): was expecting either valid name character (for unquoted name) or double-quote (for quoted) to start field name\n at [Source: UNKNOWN; line: 3, column: 10]]; }{[PwDi_CIiQHmOHp34KdWk0A][logstash-2016.05.19][4]: RemoteTransportException[[es3][inet[/10.149.76.97:9300]][indices:data/read/search[phase/query]]]; nested: SearchParseException[[logstash-2016.05.19][4]: from[-1],size[-1]: Parse Failure [Failed to parse source [{\n  \"query\": {\n        { \"match\": { \"serviceName\": \"bsHolds\" } }\n  }\n}\n]]]; nested: QueryParsingException[[logstash-2016.05.19] Failed to parse]; nested: JsonParseException[Unexpected character ('{' (code 123)): was expecting either valid name character (for unquoted name) or double-quote (for quoted) to start field name\n at [Source: UNKNOWN; line: 3, column: 10]]; }]",
     "status": 400
  }
  </code></pre>
  
  <p>not sure what it means but I'm trying to follow the guides on elastic.co but I keep getting that 400 error on any query...</p>