We're throwing away some large proportion, or all, Advanced Search event because they include a bad field "sort". These messages cost bandwidth and privacy karma, so we should either fix or disable the logging if it's unused.
From logstash,
Additional properties are not allowed ('sort' was unexpected)