Kibana: ["error","elasticsearch","data"],"pid":35607,"message":"[status_exception]: error while executing search"}

[Somesh_ng]

I'm getting below error while trying to search data from the kibana dashboard.

Attaching the UI screenshot.

{
  "request": {},
  "response": {},
  "body": {
    "statusCode": 400,
    "error": "Bad Request",
    "message": "status_exception",
    "attributes": {
      "error": {
        "type": "status_exception",
        "reason": "error while executing search",
        "caused_by": {
          "type": "search_phase_execution_exception",
          "reason": "",
          "phase": "fetch",
          "grouped": true,
          "failed_shards": [
            {
              "shard": 0,
              "index": "serviceflow-2020.12.13",
              "node": "cVSlO5VcRq2GhEfjnWXJAQ",
              "reason": {
                "type": "query_shard_exception",
                "reason": "failed to create query: For input string: \"2020-12-18T04:56:34.193Z\"",
                "index_uuid": "lpZkYRa6S3qAnmmDQ-WP9w",
                "index": "serviceflow-2020.12.13",
                "caused_by": {
                  "type": "number_format_exception",
                  "reason": "For input string: \"2020-12-18T04:56:34.193Z\""
                }
              }
            },
            {
              "shard": 0,
              "index": "serviceflow-2020.12.14",
              "node": "cVSlO5VcRq2GhEfjnWXJAQ",
              "reason": {
                "type": "query_shard_exception",
                "reason": "failed to create query: For input string: \"2020-12-18T04:56:34.193Z\"",
                "index_uuid": "eMsfvuEaSOGcWAvfdRkFEw",
                "index": "serviceflow-2020.12.14",
                "caused_by": {
                  "type": "number_format_exception",
                  "reason": "For input string: \"2020-12-18T04:56:34.193Z\""
                }
              }
            },
            {
              "shard": 0,
              "index": "serviceflow-2020.12.18",
              "node": "cVSlO5VcRq2GhEfjnWXJAQ",
              "reason": {
                "type": "query_shard_exception",
                "reason": "failed to create query: For input string: \"2020-12-18T04:56:34.193Z\"",
                "index_uuid": "JL1cNdA2Se6fFNY7e2wc4Q",
                "index": "serviceflow-2020.12.18",
                "caused_by": {
                  "type": "number_format_exception",
                  "reason": "For input string: \"2020-12-18T04:56:34.193Z\""
                }
              }
            }
          ],
          "caused_by": {
            "type": "null_pointer_exception",
            "reason": "Cannot invoke \"org.elasticsearch.search.aggregations.InternalAggregations.getSerializedSize()\" because \"reducePhase.aggregations\" is null"
          }
        }
      }
    }
  },
  "name": "Error",
  "req": {},
  "res": {}
}

Below was found in kibana log

{"type":"log","@timestamp":"2020-12-18T05:11:34Z","tags":["error","elasticsearch","data"],"pid":35607,"message":"[status_exception]: error while executing search"}

[jbudz (Jon Budzenski)]

Hmm - a few questions. Do the visualizations load individually? Do any of the visualizations have a filter saved with it? and can we check the mappings for serviceflow* to make sure all the indices have date mapped for timestamp?

GET serviceflow*/_mappings