When Iam restoring the snapshot in kibana(8.15.3), it is able to restore, but iam not able to see the logs, the field is not able to map, below is the json file
{
"mappings": {
"enabled": false,
"_meta": {
"_doc": {
"dynamic": "true",
"subobjects": true,
"dynamic_date_formats": [
"strict_date_optional_time",
"yyyy/MM/dd HH:mm:ss Z||yyyy/MM/dd Z"
],
"dynamic_templates": [],
"date_detection": true,
"numeric_detection": false,
"properties": {
"@timestamp": {
"type": "date",
"format": "strict_date_optional_time"
},
"kubernetes": {
"properties": {
"container_image": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
"container_name": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
"namespace_name": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
"pod_name": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
}
}
},
"log": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
}
}
}
}
}
}
and its statistic json files gives error
{
"_shards": {
"total": 2,
"successful": 0,
"failed": 1,
"failures": [
{
"shard": 0,
"index": "staging-ns-eks-2024.11.01-delete",
"status": "INTERNAL_SERVER_ERROR",
"reason": {
"type": "unsupported_operation_exception",
"reason": "_source only indices can't be searched or filtered"
}
}
]
}
}
its happening when i restored the snapshot
When Iam restoring the snapshot in kibana(8.15.3), it is able to restore, but iam not able to see the logs, the field is not able to map, below is the json file { "mappings": { "enabled": false, "_meta": { "_doc": { "dynamic": "true", "subobjects": true, "dynamic_date_formats": [ "strict_date_optional_time", "yyyy/MM/dd HH:mm:ss Z||yyyy/MM/dd Z" ], "dynamic_templates": [], "date_detection": true, "numeric_detection": false, "properties": { "@timestamp": { "type": "date", "format": "strict_date_optional_time" }, "kubernetes": { "properties": { "container_image": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "container_name": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "namespace_name": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "pod_name": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } } } }, "log": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } } } } } } }
and its statistic json files gives error { "_shards": { "total": 2, "successful": 0, "failed": 1, "failures": [ { "shard": 0, "index": "staging-ns-eks-2024.11.01-delete", "status": "INTERNAL_SERVER_ERROR", "reason": { "type": "unsupported_operation_exception", "reason": "_source only indices can't be searched or filtered" } } ] } } its happening when i restored the snapshot