Insert {now-1m/d} failure

Unfortunately, you cannot use the now syntax at index time. It is a query-time construct.

What you could do instead is define an ingest pipeline that automatically adds a timestamp to your documents. This post explains how to do that. Instead of the set processor used in that post, you'd use a script processor to format the date exactly how you want it.