# SearchParseException\[Unknown key for a VALUE\_STRING **URL:** \ **Category:** Kibana\ **Created:** [December 2, 2015, 12:06pm UTC](https://discuss.elastic.co/t/searchparseexception-unknown-key-for-a-value-string/36161 "2015-12-02T12:06:15Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![moncky](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/moncky/32/6320_2.png) [@moncky](https://discuss.elastic.co/u/moncky)\ **Post date:** [December 2, 2015, 12:06pm UTC](https://discuss.elastic.co/t/searchparseexception-unknown-key-for-a-value-string/36161/1 "2015-12-02T12:06:15Z")
Hi all, I am running Kibana 4.1.3 and ES 2.1.0 and feeding logs into ES with logstash. Everything was working fine till I upgraded yesterday. I removed the .kibana index and when configued the index pattern in the setting tab with out any issue. Now when I click on Disover I get a red bar with "Discover: An error occurred with your request. Reset your inputs and try again." I can find how one would do this. The elastic logs show this. Any help would be appreciated 2015-12-02 11:59:03,019][DEBUG][action.search.type] [oak] All shards failed for phase: [query] RemoteTransportException[[ash][10.44.1.241:9300][indices:data/read/search[phase/query]]]; nested: SearchParseException[failed to parse search source [{"size":500,"sort":[{"@timestamp":{"order":"desc","unmapped\_type":"boolean"}}],"highlight":{"pre\_tags":["@kibana-highlighted-field@"],"post\_tags":["@/kibana-highlighted-field@"],"fields":{"_":{}},"fragment\_size":2147483647},"aggs":{"2":{"date\_histogram":{"field":"@timestamp","interval":"30s","pre\_zone":"+00:00","pre\_zone\_adjust\_large\_interval":true,"min\_doc\_count":0,"extended\_bounds":{"min":1449056642901,"max":1449057542901}}}},"query":{"filtered":{"query":{"match\_all":{}},"filter":{"bool":{"must":[{"range":{"@timestamp":{"gte":1449056642902,"lte":1449057542902}}}],"must\_not":[]}}}},"fields":["_","\_source"],"script\_fields":{},"fielddata\_fields":["@timestamp"]}]]; nested: SearchParseException[Unknown key for a VALUE\_STRING in [2]: [pre\_zone].]; Caused by: SearchParseException[failed to parse search source [{"size":500,"sort":[{"@timestamp":{"order":"desc","unmapped\_type":"boolean"}}],"highlight":{"pre\_tags":["@kibana-highlighted-field@"],"post\_tags":["@/kibana-highlighted-field@"],"fields":{"_":{}},"fragment\_size":2147483647},"aggs":{"2":{"date\_histogram":{"field":"@timestamp","interval":"30s","pre\_zone":"+00:00","pre\_zone\_adjust\_large\_interval":true,"min\_doc\_count":0,"extended\_bounds":{"min":1449056642901,"max":1449057542901}}}},"query":{"filtered":{"query":{"match\_all":{}},"filter":{"bool":{"must":[{"range":{"@timestamp":{"gte":1449056642902,"lte":1449057542902}}}],"must\_not":[]}}}},"fields":["_","\_source"],"script\_fields":{},"fielddata\_fields":["@timestamp"]}]]; nested: SearchParseException[Unknown key for a VALUE\_STRING in [2]: [pre\_zone].]; at org.elasticsearch.search.SearchService.parseSource(SearchService.java:848) at org.elasticsearch.search.SearchService.createContext(SearchService.java:651) at org.elasticsearch.search.SearchService.createAndPutContext(SearchService.java:617) at org.elasticsearch.search.SearchService.executeQueryPhase(SearchService.java:368) at org.elasticsearch.search.action.SearchServiceTransportAction$SearchQueryTransportHandler.messageReceived(SearchServiceTransportAction.java:368) at org.elasticsearch.search.action.SearchServiceTransportAction$SearchQueryTransportHandler.messageReceived(SearchServiceTransportAction.java:365) at org.elasticsearch.transport.netty.MessageChannelHandler$RequestHandler.doRun(MessageChannelHandler.java:299) at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:37) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at java.lang.Thread.run(Thread.java:745) Caused by: SearchParseException[Unknown key for a VALUE\_STRING in [2]: [pre\_zone].] at org.elasticsearch.search.aggregations.bucket.histogram.DateHistogramParser.parse(DateHistogramParser.java:105) at org.elasticsearch.search.aggregations.AggregatorParsers.parseAggregators(AggregatorParsers.java:198) at org.elasticsearch.search.aggregations.AggregatorParsers.parseAggregators(AggregatorParsers.java:103) at org.elasticsearch.search.aggregations.AggregationParseElement.parse(AggregationParseElement.java:60) at org.elasticsearch.search.SearchService.parseSource(SearchService.java:831) ... 10 more ---
**Author:** ![Pieter\_Agenbag](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pieter_agenbag/32/4562_2.png) [@Pieter\_Agenbag](https://discuss.elastic.co/u/Pieter_Agenbag)\ **Post date:** [December 2, 2015, 1:11pm UTC](https://discuss.elastic.co/t/searchparseexception-unknown-key-for-a-value-string/36161/2 "2015-12-02T13:11:02Z")
> [@moncky](#): > > I am running Kibana 4.1.3 and ES 2.1.0 You need Kibana 4.2 or above to work with ES 2.0 and above ---
**Author:** ![moncky](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/moncky/32/6320_2.png) [@moncky](https://discuss.elastic.co/u/moncky)\ **Post date:** [December 2, 2015, 1:57pm UTC](https://discuss.elastic.co/t/searchparseexception-unknown-key-for-a-value-string/36161/3 "2015-12-02T13:57:42Z")
/facepalm How very stupid of me. Thanks Pieter. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 2:07pm UTC](https://discuss.elastic.co/t/searchparseexception-unknown-key-for-a-value-string/36161/4 "2017-07-06T14:07:38Z")