Watcher query bool must filter synatx string problem

Hello,

I try to configure a watcher with a query that catch all the field of an indice(match all) and catch only the last hit during the last one hour from now but i have a string syntax error since a couple of hour when trying to make a bool must filter query:

image

Someone know the exact syntax?

Best regards
Pierre Jutard

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.