Failed to parse query error

Elastic Stack Kibana
1

Hi,

I have this kind of data in my ES :

824×135 16.5 KB

i'd like to make more precise research by date : e;g; 2016-06-23

=> when i try this, the datas don't match the data i took.
=> when i try with the exact time : e.g 2016-06-23 15:17:13. I have the Discover: Failed to parse query [2014-06-23 15:17:13] error.

EDIT : I got this message when i click on more info :

Error: Request to Elasticsearch failed: {"error":{"root_cause":[{"type":"query_parsing_exception","reason":"Failed to parse query [2016-03-07T11:45:34.520Z]","index":"repartition","line":1,"col":157}],"type":"search_phase_execution_exception","reason":"all shards failed","phase":"query","grouped":true,"failed_shards":[{"shard":0,"index":"repartition","node":"J89YOGLZS5uRIl_Z7ZoEuw","reason":{"type":"query_parsing_exception","reason":"Failed to parse query [2016-03-07T11:45:34.520Z]","index":"repartition","line":1,"col":157,"caused_by":{"type":"parse_exception","reason":"Cannot parse '2016-03-07T11:45:34.520Z': Encountered " ":" ": "" at line 1, column 16.\nWas expecting one of:\n \n ...\n ...\n ...\n "+" ...\n "-" ...\n ...\n "(" ...\n "" ...\n "^" ...\n ...\n ...\n <FUZZY_SLOP> ...\n ...\n ...\n ...\n "[" ...\n "{" ...\n ...\n ","caused_by":{"type":"parse_exception","reason":"Encountered " ":" ": "" at line 1, column 16.\nWas expecting one of:\n \n ...\n ...\n ...\n "+" ...\n "-" ...\n ...\n "(" ...\n "" ...\n "^" ...\n ...\n ...\n <FUZZY_SLOP> ...\n ...\n ...\n ...\n "[" ...\n "{" ...\n ...\n "}}}}]}}
Error
at KbnError (http://10.33.2.23/bundles/commons.bundle.js?v=9732:57416:8)
at RequestFailure (http://10.33.2.23/bundles/commons.bundle.js?v=9732:57449:6)
at Anonymous function (http://10.33.2.23/bundles/kibana.bundle.js?v=9732:79009:14)
at Promise[try] (http://10.33.2.23/bundles/commons.bundle.js?v=9732:61111:12)
at Anonymous function (http://10.33.2.23/bundles/commons.bundle.js?v=9732:61080:10)
at Array.prototype.map (native code)
at Promise.map (http://10.33.2.23/bundles/commons.bundle.js?v=9732:61079:8)
at callResponseHandlers (http://10.33.2.23/bundles/kibana.bundle.js?v=9732:78981:8)
at Anonymous function (http://10.33.2.23/bundles/kibana.bundle.js?v=9732:78488:10)
at processQueue (http://10.33.2.23/bundles/commons.bundle.js?v=9732:42357:12)

How can i fix this ?

Thanks for help

2

using brackets/[] in a query indicates to elasticsearch that you're trying to specify a range. I suggest reading up on the query syntax here: https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-query-string-query.html#query-string-syntax

3

Thanks for the awnser, it works better now :slight_smile:
Juste one more question, i don't find it in the doc, i can pick a day e.g: for the 2013-07-09 the query is : date:[2013-07-29 TO 2013-07-30] .

Is there an easier format for picking only one day ? like removing the 2013-07-30