# Error with filtered, date ranged, search query

**URL:** <https://discuss.elastic.co/t/error-with-filtered-date-ranged-search-query/111271>\
**Category:** Elasticsearch\
**Created:** [December 12, 2017, 8:32am UTC](https://discuss.elastic.co/t/error-with-filtered-date-ranged-search-query/111271 "2017-12-12T08:32:36Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![jbendotnet](https://avatars.discourse-cdn.com/v4/letter/j/d07c76/32.png) [@jbendotnet](https://discuss.elastic.co/u/jbendotnet)\
**Post date:** [December 12, 2017, 8:32am UTC](https://discuss.elastic.co/t/error-with-filtered-date-ranged-search-query/111271/1 "2017-12-12T08:32:37Z")

</div>

Hi,

Elastic (2.4) is unhappy with this search query, from the docs it looks approx right, any pointers gratefully received 🙂

```auto
{
   "query":{
      "query_string":{
         "query":"news",
         "default_operator":"AND"
      },
      "filtered":{
         "filter":{
            "bool":{
               "must":[
                  {
                     "term":{
                        "status":"published"
                     }
                  },
                  {
                     "term":{
                        "include_in_search":1
                     }
                  },
                  {
                     "missing":{
                        "field":"deleted"
                     }
                  }
               ]
            }
         }
      },
      "constant_score":{
         "filter":{
            "range":{
               "published":{
                  "gte":"now"
               }
            }
         }
      }
   },
   "sort":{
      "TraceDateTime":{
         "order":"desc",
         "ignore_unmapped":"true"
      }
   }
}

```

The error is:

```auto
{
   "error":{
      "root_cause":[
         {
            "type":"parse_exception",
            "reason":"failed to parse search source. expected field name but got [START_OBJECT]"
         }
      ],
      "type":"search_phase_execution_exception",
      "reason":"all shards failed",
      "phase":"query",
      "grouped":true,
      "failed_shards":[
         {
            "shard":0,
            "index":"XXX",
            "node":"j4ZKPe3HQ5Scet4uSd4QGg",
            "reason":{
               "type":"parse_exception",
               "reason":"failed to parse search source. expected field name but got [START_OBJECT]"
            }
         }
      ]
   },
   "status":400
}

```

Thanks,

Jon

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [December 12, 2017, 8:44am UTC](https://discuss.elastic.co/t/error-with-filtered-date-ranged-search-query/111271/2 "2017-12-12T08:44:36Z")

</div>

Please format your code using `</>` icon as explained in [this guide](https://discuss.elastic.co/t/about-the-elasticsearch-category/21). It will make your post more readable.

Or use markdown style like:

````
```
CODE
```
````

---

<div class="post-metadata">

**Author:** ![jbendotnet](https://avatars.discourse-cdn.com/v4/letter/j/d07c76/32.png) [@jbendotnet](https://discuss.elastic.co/u/jbendotnet)\
**Post date:** [December 12, 2017, 9:00am UTC](https://discuss.elastic.co/t/error-with-filtered-date-ranged-search-query/111271/3 "2017-12-12T09:00:21Z")

</div>

Apologies, the editor consistently messes with newlines etc though ☹

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [December 13, 2017, 7:56am UTC](https://discuss.elastic.co/t/error-with-filtered-date-ranged-search-query/111271/4 "2017-12-13T07:56:59Z")

</div>

That's better but to make it readable, could you indent the code properly? You can use [https://jsonformatter.curiousconcept.com/](https://jsonformatter.curiousconcept.com/) for example.

Thanks

---

<div class="post-metadata">

**Author:** ![jbendotnet](https://avatars.discourse-cdn.com/v4/letter/j/d07c76/32.png) [@jbendotnet](https://discuss.elastic.co/u/jbendotnet)\
**Post date:** [December 13, 2017, 9:22am UTC](https://discuss.elastic.co/t/error-with-filtered-date-ranged-search-query/111271/5 "2017-12-13T09:22:48Z")

</div>

Hi,

I use VSCODE, the text I paste in is a being reformatted terribly by Discuss' editor, it starts off perfectly.

Here's request/response in a pastebin: [https://paste.ee/p/ys8MV](https://paste.ee/p/ys8MV) (which annoyingly swapped the order on render).

Thanks.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [December 13, 2017, 9:52am UTC](https://discuss.elastic.co/t/error-with-filtered-date-ranged-search-query/111271/6 "2017-12-13T09:52:59Z")

</div>

Hmm. I see. There have been recently some changes in the discuss editor which indeed formats badly the text if you "paste" code.  
But it's ok if you "paste with style" (on mac it's ![image](https://us1.discourse-cdn.com/elastic/original/3X/f/f/ffe7b08f5c3bc11bf1b0968390562c2d481cf4d4.jpg) ).

I edited your post.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [December 13, 2017, 9:55am UTC](https://discuss.elastic.co/t/error-with-filtered-date-ranged-search-query/111271/7 "2017-12-13T09:55:48Z")

</div>

I think the problem is here:

```auto
"sort":{
      "TraceDateTime":{
         "order":"desc",
         "ignore_unmapped":"true"
      }
   }

```

Can you try with:

```auto
"sort":[{
      "TraceDateTime":{
         "order":"desc",
         "ignore_unmapped":"true"
      }
   }]

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 10, 2018, 9:55am UTC](https://discuss.elastic.co/t/error-with-filtered-date-ranged-search-query/111271/8 "2018-01-10T09:55:59Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
