2 'musts' in 1 bool illegal?


(Yu Watanabe) #1

Version : Kibana 5.4.0

Kibana acknowledges 2 musts in 1 bool as an error.
It says,

Duplicate key "must" . Syntax error.

Is this illegal?

kibana-error

When I exectue the query , the result is returned properly.


#2

Yes.

"must" : [
	{"match" : {"message:" "localhost"}},
	{"match" : {
		"range": {
			"@timestamp" : {
				"lt" : "now/h"
			}
		}
	}
]

This is the proper syntax.


(Yu Watanabe) #3

Thanks.


(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.