# Graylog restore problem **URL:** \ **Category:** Graylog Central (peer support)\ **Created:** [January 3, 2024, 3:07pm UTC](https://community.graylog.org/t/graylog-restore-problem/31126 "2024-01-03T15:07:04Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![melek](https://avatars.discourse-cdn.com/v4/letter/m/439d5e/32.png) [@melek](https://community.graylog.org/u/melek)\ **Post date:** [January 3, 2024, 3:07pm UTC](https://community.graylog.org/t/graylog-restore-problem/31126/1 "2024-01-03T15:07:04Z")
Hi, I migrated between same version graylog / opensearch environments.When I restore the backup I took from the previous Graylog in the new Graylog environment, I cannot view it in the stream. I couldn’t find it in all the messages. The restore was done properly. It didn’t give any errors. I ask for your support in this matter. Graylog version: 5.0.2 community Opensearch version: 2.9.0 community ---
**Author:** ![drewmiranda-gl](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/drewmiranda-gl/32/13376_2.png) [@drewmiranda-gl](https://community.graylog.org/u/drewmiranda-gl)\ **Post date:** [January 3, 2024, 6:51pm UTC](https://community.graylog.org/t/graylog-restore-problem/31126/2 "2024-01-03T18:51:43Z")
Can you clarify what you backed up (and how) and how you restored it? ---
**Author:** ![melek](https://avatars.discourse-cdn.com/v4/letter/m/439d5e/32.png) [@melek](https://community.graylog.org/u/melek)\ **Post date:** [January 4, 2024, 9:13am UTC](https://community.graylog.org/t/graylog-restore-problem/31126/3 "2024-01-04T09:13:13Z")
​ I restore the index backup taken in the old graylog environment in the new graylog environment. When I check, the logs I restored go into the default stream. Log is not coming to the correct stream. I also reviewed it for the template. There is no difference. I moved Stream from the old environment to the new environment with a content pack. Stream id is the same. Restore command: (elasticvue) POST [http://ip:9200/\_snapshot/apim\_mwservices\_prod\_40/15dec2023/\_restore](http://ip:9200/_snapshot/apim_mwservices_prod_40/15dec2023/_restore) { “rename\_pattern”: “apim\_mwservices\_prod\_40”, “rename\_replacement”: “restore\_2024010302”, “index\_settings”: { “index.number\_of\_replicas”: 0 } } ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/a/9/a95b81d3ef969a0d81b3163c3c8862f580e99afc.png) ---
**Author:** ![drewmiranda-gl](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/drewmiranda-gl/32/13376_2.png) [@drewmiranda-gl](https://community.graylog.org/u/drewmiranda-gl)\ **Post date:** [January 4, 2024, 5:25pm UTC](https://community.graylog.org/t/graylog-restore-problem/31126/4 "2024-01-04T17:25:35Z")
Understood. Graylog maintains metadata on the indices (in its mongo db) that is required when migrating data or doing a backup/restore. To my knowledge I don’t believe the `_snapshot` functionality (of elasticsearch?) is officially supported for use with graylog. Did you restore the mongodb as well? ---
**Author:** ![melek](https://avatars.discourse-cdn.com/v4/letter/m/439d5e/32.png) [@melek](https://community.graylog.org/u/melek)\ **Post date:** [January 5, 2024, 11:16am UTC](https://community.graylog.org/t/graylog-restore-problem/31126/5 "2024-01-05T11:16:10Z")
I did not take a mongo backup. I created streams by switching. If I take a backup now and restore it to the same environment, won’t it crush the existing indexes? ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\ **Post date:** [January 19, 2024, 11:16am UTC](https://community.graylog.org/t/graylog-restore-problem/31126/6 "2024-01-19T11:16:52Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.