Errors similar to the example below are seen when running reports on the Archiver.
There was an unspecified parsing error.
Input(time='2015-Oct-31 18:30:00'-'2015-Nov-02 18:29:59')&&(device.type=symantecav).
The meta key "device.type" specified in the error message is missing from the index-archiver-custom.xml.
Add the meta key "device.type" to the index-archiver-custom.xml and restart the nwarchiver service. Make sure that aggregation has started before running the report again otherwise you will get an error message about the sdk.