# Error log - don't understand how to read it

**URL:** <https://forum.opensearch.org/t/error-log-dont-understand-how-to-read-it/11361>\
**Category:** Alerting\
**Created:** [October 28, 2022, 1:14pm UTC](https://forum.opensearch.org/t/error-log-dont-understand-how-to-read-it/11361 "2022-10-28T13:14:58Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![parra](https://avatars.discourse-cdn.com/v4/letter/p/54ee81/32.png) [@parra](https://forum.opensearch.org/u/parra)\
**Post date:** [October 28, 2022, 1:14pm UTC](https://forum.opensearch.org/t/error-log-dont-understand-how-to-read-it/11361/1 "2022-10-28T13:14:58Z")

</div>

**Versions** (relevant - OpenSearch/Dashboard/Server OS/Browser): OS 1.3

**Describe the issue** : Error when alerting.

**Configuration** :

**Relevant Logs or Screenshots** :  
Error: Failed fetching inputs: Failed to execute phase [query], all shards failed; shardFailures {[rgYDKj3tSTOwW5USkKjrXw][no][0]: RemoteTransportException[[2ccea0de0c8e37635db2e53110aa139e][10.212.39.252:9300][indices:data/read/search[phase/query]]]; nested: OpenSearchParseException[truncated date math [+14]]; }{[rgYDKj3tSTOwW5USkKjrXw][no][1]: RemoteTransportException[[2ccea0de0c8e37635db2e53110aa139e][10.212.39.252:9300][indices:data/read/search[phase/query]]]; nested: OpenSearchParseException[truncated date math [+14]]; }{[rgYDKj3tSTOwW5USkKjrXw][no][2]: RemoteTransportException[[2ccea0de0c8e37635db2e53110aa139e][10.212.39.252:9300][indices:data/read/search[phase/query]]]; nested: OpenSearchParseException[truncated date math [+14]]; }{[rgYDKj3tSTOwW5USkKjrXw][no][3]: RemoteTransportException[[2ccea0de0c8e37635db2e53110aa139e][10.212.39.252:9300][indices:data/read/search[phase/query]]]; nested: OpenSearchParseException[truncated date math [+14]]; }{[rgYDKj3tSTOwW5USkKjrXw][no][4]: RemoteTransportException[[2ccea0de0c8e37635db2e53110aa139e][10.212.39.252:9300][indices:data/read/search[phase/query]]]; nested: OpenSearchParseException[truncated date math [+14]]; }; org.opensearch.OpenSearchParseException: truncated date math [+14]

---

<div class="post-metadata">

**Author:** ![ashisagr-amzn](https://avatars.discourse-cdn.com/v4/letter/a/a9adbd/32.png) [@ashisagr-amzn](https://forum.opensearch.org/u/ashisagr-amzn)\
**Post date:** [November 8, 2022, 12:46am UTC](https://forum.opensearch.org/t/error-log-dont-understand-how-to-read-it/11361/2 "2022-11-08T00:46:27Z")

</div>

I recommend extracting out the monitor query and try to execute it directly against the cluster. It seems like the monitor query has issues.