Hi there,
I´ve done a few searchs for this kind of solution and I could not find anywhere. Can someone help me?
Jul 15 12:00:36 kbn kibana[3899]: [2022-07-15T12:00:36.438-03:00][ERROR][plugins.securitySolution] Bulk Indexing of signals failed: index: ".ds-logs-checkpoint.firewall-default-2022.07.14-000024" reason: "failed to create query: end-of-string expected at position 1" type: "query_shard_exception" caused by reason: "end-of-string expected at position 1" caused by type: "illegal_argument_exception",index: ".ds-logs-elastic_agent.endpoint_security-default-2022.07.15-000030" reason: "failed to create query: end-of-string expected at position 1" type: "query_shard_exception" caused by reason: "end-of-string expected at position 1" caused by type: "illegal_argument_exception",index: ".ds-logs-elastic_agent.filebeat-default-2022.07.15-000030" reason: "failed to create query: end-of-string expected at position 1" type: "query_shard_exception" caused by reason: "end-of-string expected at position 1" caused by type: "illegal_argument_exception",index: ".ds-logs-elastic_agent.fleet_server-default-2022.07.15-000030" reason: "failed to create query: end-of-string expected at position 1" type: "query_shard_exception" caused by reason: "end-of-string expected at position 1" caused by type: "illegal_argument_exception",index: ".ds-logs-elastic_agent.osquerybeat-default-2022.07.14-000004" reason: "failed to create query: end-of-string expected at position 1" type: "query_shard_exception" caused by reason: "end-of-string expected at position 1" caused by type: "illegal_argument_exception",index: ".ds-logs-endpoint.events.file-default-2022.07.15-000030" reason: "failed to create query: end-of-string expected at position 1" type: "query_shard_exception" caused by reason: "end-of-string expected at position 1" caused by type: "illegal_argument_exception",index: ".ds-logs-endpoint.events.library-default-2022.07.15-000030" reason: "failed to create query: end-of-string expected at position 1" type: "query_shard_exception" caused by reason: "end-of-string expected at position 1" caused by type: "illegal_argument_exception",index: ".ds-logs-endpoint.events.network-default-2022.07.15-000030" reason: "failed to create query: end-of-string expected at position 1" type: "query_shard_exception" caused by reason: "end-of-string expected at position 1" caused by type: "illegal_argument_exception",index: ".ds-logs-endpoint.events.process-default-2022.07.15-000030" reason: "failed to create query: end-of-string expected at position 1" type: "query_shard_exception" caused by reason: "end-of-string expected at position 1" caused by type: "illegal_argument_exception",index: ".ds-logs-endpoint.events.registry-default-2022.07.15-000030" reason: "failed to create query: end-of-string expected at position 1" type: "query_shard_exception" caused by reason: "end-of-string expected at position 1" caused by type: "illegal_argument_exception",index: ".ds-logs-endpoint.events.security-default-2022.07.15-000030" reason: "failed to create query: end-of-string expected at position 1" type: "query_shard_exception" caused by reason: "end-of-string expected at position 1" caused by type: "illegal_argument_exception",index: ".ds-logs-osquery_manager.result-default-2022.07.14-000004" reason: "failed to create query: end-of-string expected at position 1" type: "query_shard_exception" caused by reason: "end-of-string expected at position 1" caused by type: "illegal_argument_exception",index: ".ds-logs-system.application-default-2022.07.15-000030" reason: "failed to create query: end-of-string expected at position 1" type: "query_shard_exception" caused by reason: "end-of-string expected at position 1" caused by type: "illegal_argument_exception",index: ".ds-logs-system.security-default-2022.07.15-000032" reason: "failed to create query: end-of-string expected at position 1" type: "query_shard_exception" caused by reason: "end-of-string expected at position 1" caused by type: "illegal_argument_exception",index: ".ds-logs-system.system-default-2022.07.15-000030" reason: "failed to create query: end-of-string expected at position 1" type: "query_shard_exception" caused by reason: "end-of-string expected at position 1" caused by type: "illegal_argument_exception",index: ".ds-logs-ti_abusech.malware-default-2022.07.15-000030" reason: "failed to create query: end-of-string expected at position 1" type: "query_shard_exception" caused by reason: "end-of-string expected at position 1" caused by type: "illegal_argument_exception",index: ".ds-logs-ti_abusech.malwarebazaar-default-2022.07.15-000030" reason: "failed to create query: end-of-string expected at position 1" type: "query_shard_exception" caused by reason: "end-of-string expected at position 1" caused by type: "illegal_argument_exception",index: ".ds-logs-ti_abusech.url-default-2022.07.15-000030" reason: "failed to create query: end-of-string expected at position 1" type: "query_shard_exception" caused by reason: "end-of-string expected at position 1" caused by type: "illegal_argument_exception",index: ".ds-logs-windows.powershell-default-2022.07.15-000030" reason: "failed to create query: end-of-string expected at position 1" type: "query_shard_exception" caused by reason: "end-of-string expected at position 1" caused by type: "illegal_argument_exception",index: ".ds-logs-windows.powershell_operational-default-2022.07.15-000030" reason: "failed to create query: end-of-string expected at position 1" type: "query_shard_exception" caused by reason: "end-of-string expected at position 1" caused by type: "illegal_argument_exception" name: "Possible DC Shadow" id: "b9e5a5d0-fe1b-11ec-b0f4-c9dfbc3bebf9" rule id: "32e19d25-4aed-4860-a55a-be99cb0bf7ed" execution id: "566dae0a-dc79-488b-8d70-51898fed8b98" space ID: "default"
Yesterday was everything fine so... have no idea how to sort this out.
Thanks for the attention.