_mappings.json

{
  "mapping": {
    "properties": {
      "eventType": {
        "type": "text",
        "fields": {
          "keyword": {
            "type": "keyword",
            "ignore_above": 256
          }
        }
      },
      "siteId": {
        "type": "long"
      },
      "siteUrl": {
        "type": "text",
        "fields": {
          "keyword": {
            "type": "keyword",
            "ignore_above": 256
          }
        }
      },
      "time": {
        "type": "date",
        "format": "yyyy/MM/dd HH:mm:ss||yyyy/MM/dd||epoch_millis"
      }
    }
  }
}

Queries:

This works:
GET team_1/_search
{
  "query" : {
      "match" : {
        "eventType" : "login"
      }
  },
   "sort": { "time": "desc"}
}

This errors:
GET team_1/_search
{
  "query" : {
      "match" : {
        "eventType" : "login"
      },
      "filter" : {
        "range" : {
          "lte" : {
            "time" : "2021/01/01"
          }
        }
      }
  },
   "sort": { "time": "desc"}
}


{
  "error": {
    "root_cause": [
      {
        "type": "parsing_exception",
        "reason": "[match] malformed query, expected [END_OBJECT] but found [FIELD_NAME]",
        "line": 6,
        "col": 7
      }
    ],
    "type": "parsing_exception",
    "reason": "[match] malformed query, expected [END_OBJECT] but found [FIELD_NAME]",
    "line": 6,
    "col": 7
  },
  "status": 400
}