not able to access the kibana restored snapshot

[Neerajkumar171]

When Iam restoring the snapshot in kibana(8.15.3), it is able to restore, but iam not able to see the logs, the field is not able to map, below is the json file

  "mappings": {
    "enabled": false,
    "_meta": {
      "_doc": {
        "dynamic": "true",
        "subobjects": true,
        "dynamic_date_formats": [
          "strict_date_optional_time",
          "yyyy/MM/dd HH:mm:ss Z||yyyy/MM/dd Z"
        ],
        "dynamic_templates": [],
        "date_detection": true,
        "numeric_detection": false,
        "properties": {
          "@timestamp": {
            "type": "date",
            "format": "strict_date_optional_time"
          },
          "kubernetes": {
            "properties": {
              "container_image": {
                "type": "text",
                "fields": {
                  "keyword": {
                    "type": "keyword",
                    "ignore_above": 256
                  }
                }
              },
              "container_name": {
                "type": "text",
                "fields": {
                  "keyword": {
                    "type": "keyword",
                    "ignore_above": 256
                  }
                }
              },
              "namespace_name": {
                "type": "text",
                "fields": {
                  "keyword": {
                    "type": "keyword",
                    "ignore_above": 256
                  }
                }
              },
              "pod_name": {
                "type": "text",
                "fields": {
                  "keyword": {
                    "type": "keyword",
                    "ignore_above": 256
                  }
                }
              }
            }
          },
          "log": {
            "type": "text",
            "fields": {
              "keyword": {
                "type": "keyword",
                "ignore_above": 256
              }
            }
          }
        }
      }
    }
  }
}```


and its statistic json files gives error
{
  "_shards": {
    "total": 2,
    "successful": 0,
    "failed": 1,
    "failures": [
      {
        "shard": 0,
        "index": "staging-ns-eks-2024.11.01-delete",
        "status": "INTERNAL_SERVER_ERROR",
        "reason": {
          "type": "unsupported_operation_exception",
          "reason": "_source only indices can't be searched or filtered"
        }
      }
    ]
  }
}
its happening when i restored the snapshot

[elasticmachine]

Pinging @elastic/kibana-accessibility (Project:Accessibility)

[elasticmachine]

Pinging @elastic/kibana-management (Team:Kibana Management)

[alisonelizabeth]

Hi @Neerajkumar171 - are there any screenshots or steps to reproduce you can provide to help us troubleshoot? Are you using the Snapshot & Restore UI in Kibana?

[Neerajkumar171]

i am creating policy in stack-management ==> snapshot&restore

when iam restoring the snapshot, the snapshot is able to restore but, i am not able to discover index, in mapping section iam getting mapping=false, and when iam going to see index, iam facing this error:
unexpected docvalues type NONE for field '_ignored' (expected one of [SORTED, SORTED_SET]). Re-index with correct docvalues type.

[Neerajkumar171]

@alisonelizabeth any update?

[alisonelizabeth]

Hi @Neerajkumar171 this looks like a known issue on the Elasticsearch side, see: elastic/elasticsearch#77989.

Can you confirm?

[alisonelizabeth]

Closing this issue, as it appears to be a known issue with Elasticsearch.