# Timelion: reduce\_search\_phase\_exception

**URL:** <https://discuss.elastic.co/t/timelion-reduce-search-phase-exception/91786>\
**Category:** Kibana\
**Tags:** timelion\
**Created:** [July 4, 2017, 2:09pm UTC](https://discuss.elastic.co/t/timelion-reduce-search-phase-exception/91786 "2017-07-04T14:09:35Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![dreadlocked1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dreadlocked1/32/22072_2.png) [@dreadlocked1](https://discuss.elastic.co/u/dreadlocked1)\
**Post date:** [July 4, 2017, 2:09pm UTC](https://discuss.elastic.co/t/timelion-reduce-search-phase-exception/91786/1 "2017-07-04T14:09:36Z")

</div>

Hi, when I plug any new winlogbeat agent to Logstash, Kibana starts showing the following error message. I'm over an Ubuntu 16.06 system, and using the following versions:

LS: 5.4.0  
ES: 5.3.0  
KB: 5.1.1

```
  Error: in cell #1: [reduce_search_phase_exception] [reduce] 
        at throwWithCell (/usr/share/kibana/src/core_plugins/timelion/server/handlers/chain_runner.js:30:11)
        at /usr/share/kibana/src/core_plugins/timelion/server/handlers/chain_runner.js:156:13
        at arrayEach (/usr/share/kibana/node_modules/lodash/index.js:1289:13)
        at Function.<anonymous> (/usr/share/kibana/node_modules/lodash/index.js:3345:13)
        at /usr/share/kibana/src/core_plugins/timelion/server/handlers/chain_runner.js:148:9
        at bound (domain.js:280:14)
        at runBound (domain.js:293:12)
        at tryCatcher (/usr/share/kibana/node_modules/bluebird/js/main/util.js:26:23)
        at Promise._settlePromiseFromHandler (/usr/share/kibana/node_modules/bluebird/js/main/promise.js:503:31)
        at Promise._settlePromiseAt (/usr/share/kibana/node_modules/bluebird/js/main/promise.js:577:18)
        at Promise._settlePromises (/usr/share/kibana/node_modules/bluebird/js/main/promise.js:693:14)
        at Async._drainQueue (/usr/share/kibana/node_modules/bluebird/js/main/async.js:123:16)
        at Async._drainQueues (/usr/share/kibana/node_modules/bluebird/js/main/async.js:133:10)
        at Immediate.Async.drainQueues (/usr/share/kibana/node_modules/bluebird/js/main/async.js:15:14)
        at runCallback (timers.js:637:20)
        at tryOnImmediate (timers.js:610:5)
```

---

<div class="post-metadata">

**Author:** ![weltenwort](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/weltenwort/32/53885_2.png) [@weltenwort](https://discuss.elastic.co/u/weltenwort)\
**Post date:** [July 4, 2017, 3:52pm UTC](https://discuss.elastic.co/t/timelion-reduce-search-phase-exception/91786/2 "2017-07-04T15:52:21Z")

</div>

Hi @dreadlocked1,

first I want to point out that only the combination of Kibana 5.1.1 with Elasticsearch 5.1.x is supported. I would recommend to upgrade both to 5.4.3.

Regarding the error, is it possible that lucene expressions are disabled on your cluster? They are required for timelion to work. Please track [Issue #8829](https://github.com/elastic/kibana/issues/8829) for updates and feel free to add your comments to it.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 1, 2017, 3:52pm UTC](https://discuss.elastic.co/t/timelion-reduce-search-phase-exception/91786/3 "2017-08-01T15:52:36Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.