Dmitri,
Thank you so much for your quick response. So I reloaded the data yesterday, which is why the timestamp of 3/15/18, however the original date of the data is 4/19/17 of when it was created (not loaded into ES). I have tried starting the Job from the beginning of the data, I chose the option of 3/14/17, I chose for the end time to be today to cover the the timezone, but it is still giving me the same message
I was evening following this post from the forum because it was simular. I too had my indices having a date pattern. So I followed the steps to resolve, but it did not yield anything different
Security analytics recipes 93591