# Problem to Create index pattern

**URL:** <https://discuss.elastic.co/t/problem-to-create-index-pattern/357162>\
**Category:** Kibana\
**Created:** [April 10, 2024, 4:59pm UTC](https://discuss.elastic.co/t/problem-to-create-index-pattern/357162 "2024-04-10T16:59:32Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![erickml0](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/erickml0/32/133420_2.png) [@erickml0](https://discuss.elastic.co/u/erickml0)\
**Post date:** [April 10, 2024, 4:59pm UTC](https://discuss.elastic.co/t/problem-to-create-index-pattern/357162/1 "2024-04-10T16:59:32Z")

</div>

Hi, community.  
I'm trying to create the index pattern (i don't have one), it contains 44,238 documents but the company didn't create the index at the beginning.  
I thought that was the amount of documents but hours have passed and it is only loading and there isn't any error in the log.  
What could be the mistake?

This is the screen of the loading

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/f/3/f30333de183d19e7a34ec9018dadef9c12b72208.png)

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [April 10, 2024, 7:13pm UTC](https://discuss.elastic.co/t/problem-to-create-index-pattern/357162/2 "2024-04-10T19:13:05Z")

</div>

The version you are using is too old and is not supported any more.

What do you have in the logs? Without the logs is pretty hard to know what may happening.

It may be an issue on this version that was already solved in newer ones.

---

<div class="post-metadata">

**Author:** ![erickml0](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/erickml0/32/133420_2.png) [@erickml0](https://discuss.elastic.co/u/erickml0)\
**Post date:** [April 10, 2024, 7:36pm UTC](https://discuss.elastic.co/t/problem-to-create-index-pattern/357162/3 "2024-04-10T19:36:34Z")

</div>

The version is: 6.8.23

In the browser (with F12), i get this:

```auto
Error: Forbidden
    at commons.bundle.js:4:202880
    at step (vendors.bundle.dll.js:532:4015)
    at Object.next (vendors.bundle.dll.js:532:3275)
    at fulfilled (vendors.bundle.dll.js:532:2669)

```

And in the elasticsearch.log, there's this

```auto
[2024-04-10T00:01:48,278][DEBUG][o.e.a.s.TransportSearchAction] [3ZGZPy2] [cultura][3], node[3ZGZPy2UTvGWNXIF2G2x1w], [P], s[STARTED], a[id=6pQUHD1MSl2vVwx2O9SG8g]: Failed to execute [SearchRequest{searchType$org.elasticsearch.transport.RemoteTransportException: [3ZGZPy2][127.0.0.1:9300][indices:data/read/search[phase/query]]
Caused by: org.elasticsearch.index.query.QueryShardException: Failed to parse query [-]
        at org.elasticsearch.index.query.QueryStringQueryBuilder.doToQuery(QueryStringQueryBuilder.java:1051) ~[elasticsearch-6.8.23.jar:6.8.23]
        at org.elasticsearch.index.query.AbstractQueryBuilder.toQuery(AbstractQueryBuilder.java:106) ~[elasticsearch-6.8.23.jar:6.8.23]
        at org.elasticsearch.index.query.BoolQueryBuilder.addBooleanClauses(BoolQueryBuilder.java:415) ~[elasticsearch-6.8.23.jar:6.8.23]
        at org.elasticsearch.index.query.BoolQueryBuilder.doToQuery(BoolQueryBuilder.java:385) ~[elasticsearch-6.8.23.jar:6.8.23]
        at org.elasticsearch.index.query.AbstractQueryBuilder.toQuery(AbstractQueryBuilder.java:106) ~[elasticsearch-6.8.23.jar:6.8.23]
        at org.elasticsearch.index.query.BoolQueryBuilder.addBooleanClauses(BoolQueryBuilder.java:415) ~[elasticsearch-6.8.23.jar:6.8.23]
        at org.elasticsearch.index.query.BoolQueryBuilder.doToQuery(BoolQueryBuilder.java:383) ~[elasticsearch-6.8.23.jar:6.8.23]
        at org.elasticsearch.index.query.AbstractQueryBuilder.toQuery(AbstractQueryBuilder.java:106) ~[elasticsearch-6.8.23.jar:6.8.23]
        at org.elasticsearch.index.query.QueryShardContext.lambda$toQuery$2(QueryShardContext.java:319) ~[elasticsearch-6.8.23.jar:6.8.23]
        at org.elasticsearch.index.query.QueryShardContext.toQuery(QueryShardContext.java:331) ~[elasticsearch-6.8.23.jar:6.8.23]
        at org.elasticsearch.index.query.QueryShardContext.toQuery(QueryShardContext.java:318) ~[elasticsearch-6.8.23.jar:6.8.23]
        at org.elasticsearch.search.SearchService.parseSource(SearchService.java:806) ~[elasticsearch-6.8.23.jar:6.8.23]
        at org.elasticsearch.search.SearchService.createContext(SearchService.java:653) ~[elasticsearch-6.8.23.jar:6.8.23]
        at org.elasticsearch.search.SearchService.createAndPutContext(SearchService.java:604) ~[elasticsearch-6.8.23.jar:6.8.23]
        at org.elasticsearch.search.SearchService.executeQueryPhase(SearchService.java:388) ~[elasticsearch-6.8.23.jar:6.8.23]
        at org.elasticsearch.search.SearchService.access$100(SearchService.java:127) ~[elasticsearch-6.8.23.jar:6.8.23]
        at org.elasticsearch.search.SearchService$2.onResponse(SearchService.java:360) [elasticsearch-6.8.23.jar:6.8.23]
        at org.elasticsearch.search.SearchService$2.onResponse(SearchService.java:356) [elasticsearch-6.8.23.jar:6.8.23]
        at org.elasticsearch.search.SearchService$4.doRun(SearchService.java:1129) [elasticsearch-6.8.23.jar:6.8.23]
        at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:37) [elasticsearch-6.8.23.jar:6.8.23]
        at org.elasticsearch.common.util.concurrent.TimedRunnable.doRun(TimedRunnable.java:41) [elasticsearch-6.8.23.jar:6.8.23]
        at org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRunnable.doRun(ThreadContext.java:778) [elasticsearch-6.8.23.jar:6.8.23]
        at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:37) [elasticsearch-6.8.23.jar:6.8.23]
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [?:1.8.0_181]
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [?:1.8.0_181]
        at java.lang.Thread.run(Thread.java:748) [?:1.8.0_181]
Caused by: org.apache.lucene.queryparser.classic.ParseException: Cannot parse '-': Encountered "<EOF>" at line 1, column 1.
Was expecting one of:
    <BAREOPER> ...
    "(" ...
    "*" ...
    <QUOTED> ...
    <TERM> ...
    <PREFIXTERM> ...
    <WILDTERM> ...
    <REGEXPTERM> ...
    "[" ...
    "{" ...
    <NUMBER> ...
    <TERM> ...
    "*" ...

```
