elastalert icon indicating copy to clipboard operation
elastalert copied to clipboard

RequestError(400, u'search_phase_execution_exception', u'No mapping found for [alert_time] in order to sort on')

Open guoyingying12 opened this issue 6 years ago • 1 comments

Hi~ I have a trouble,can you help me? ENV: elk-->5.6.16 elastalert-->0.1.39 when I have tested,it was successfully.But when I have started,it was error.

elastalert-test-rule example_rules/filebeat.yaml

图片

python -m elastalert.elastalert --verbose --rule example_rules/filebeat.yaml

图片

guoyingying12 avatar Jun 18 '19 09:06 guoyingying12

Did you find any solution?

loGit123 avatar Jan 09 '23 05:01 loGit123