Alerting error: Can't get text on a START_OBJECT

Hi all,

I'm trying to create an alert for a query so that it sends an email when that query condition is met.

When i try to create monitor & action, when i click on create -it throws an error-:
[illegal_state_exception] Can't get text on a START_OBJECT at 1:899

I am not getting where the error is originating from and how to rectify it.
Any clues?

Hi Sandeep,
Can you post the query you're trying to use?
Could you also clarify which rule type you're using?
Perhaps a screenshot would help?

Hi @gmmorris ,

Below screenshots of my query :


So basically I was trying to query: to get avergage of total_quantity...
I'm getting the result when i do sample run.

But when i try to create monitor , it gives the error:
[illegal_state_exception] Can't get text on a START_OBJECT at 1:899

Ah, I wasn't sure what you meant by monitor, but now I understand why.

Looking at the configuration above I believe you're not in fact using Elastic's Alerting framework, but rather Amazon's OpenSearch.
This is not the Elastic distribution of Kibana, but rather an Amazon specific product (see the differences here ). We, unfortunately, cannot offer support for Amazon's distribution (sadly I'm not familiar enough with their product to do so), so you may have better luck asking in their forums.

It's also worth noting that we do have an alerting feature as part of our distribution as well, which we are happy to offer support for: https://www.elastic.co/what-is/kibana-alerting

OpenSearch/OpenDistro are AWS run products and differ from the original Elasticsearch and Kibana products that Elastic builds and maintains. You may need to contact them directly for further assistance.

(This is an automated response from your friendly Elastic bot. Please report this post if you have any suggestions or concerns :elasticheart: )

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.