2 'musts' in 1 bool illegal?

Elastic Stack Kibana
1

Version : Kibana 5.4.0

Kibana acknowledges 2 musts in 1 bool as an error.
It says,

Duplicate key "must" . Syntax error.

Is this illegal?

kibana-error

When I exectue the query , the result is returned properly.

query-res
query-res.PNG841×668 29.3 KB

2

Yes.

"must" : [
	{"match" : {"message:" "localhost"}},
	{"match" : {
		"range": {
			"@timestamp" : {
				"lt" : "now/h"
			}
		}
	}
]

This is the proper syntax.

3

Thanks.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.