# Watcher query bool must filter synatx string problem

**URL:** https://discuss.elastic.co/t/watcher-query-bool-must-filter-synatx-string-problem/217086
**Category:** Elasticsearch
**Created:** [January 29, 2020, 11:11pm UTC](https://discuss.elastic.co/t/watcher-query-bool-must-filter-synatx-string-problem/217086 "2020-01-29T23:11:09Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![pierrejutard](https://avatars.discourse-cdn.com/v4/letter/p/c5a1d2/32.png) [@pierrejutard](https://discuss.elastic.co/u/pierrejutard)
#### Post date: [January 29, 2020, 11:11pm UTC](https://discuss.elastic.co/t/watcher-query-bool-must-filter-synatx-string-problem/217086/1 "2020-01-29T23:11:09Z")

</div>

Hello,

I try to configure a watcher with a query that catch all the field of an indice(match all) and catch only the last hit during the last one hour from now but i have a string syntax error since a couple of hour when trying to make a bool must filter query:

![image](https://us1.discourse-cdn.com/elastic/original/3X/4/d/4dfc78584b2c8b3743b304c040eeaa030a997a0b.png)

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/d/7/d7b70583b5bf1690309cf82fd7b5b120808d4d49.png)

Someone know the exact syntax?

Best regards  
Pierre Jutard

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [February 26, 2020, 11:11pm UTC](https://discuss.elastic.co/t/watcher-query-bool-must-filter-synatx-string-problem/217086/2 "2020-02-26T23:11:17Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.