Elasticsearch Restore

By Opster Team

Updated: Mar 21, 2023

| 1 min read


In Elasticsearch, restore refers to the snapshot restore mechanism, which returns indices or clusters to a previous, saved state. You can restore the entire cluster from the snapshot or restore an individual index or selected indices.


To restore the whole snapshot:

POST /_snapshot/my_backup/snapshot-01-11-2019/_restore

To restore an individual index:

POST /_snapshot/my_backup/snapshot-01-11-2019/_restore
  "indices": "my_index"


  • If you are using a security tool like Searchguard, the snapshot restore capability must be enabled in elasticsearch.yml. Otherwise, it will throw a security exception.

Common issues

  • If an index or indices already exist with the same names as those you are going to restore, they need to either be closed or deleted before you can restore from a snapshot. Otherwise, the restore operation will fail due to an error that the index already exists.

Related log errors to this ES concept

Restore failed
Cannot open ccr restore session if shard closed
Cannot restore incompatible snapshot
Restore process is already running in this cluster
Cannot restore index index because it cannot be
Cannot restore index renamedIndex because an open index
Cannot restore partial index renamedIndex because such
Cannot remove setting ignoredSetting on restore
Cannot delete snapshot during a restore
Cannot restore index index because it cannot be upgraded
Index index wasn t fully snapshotted - cannot restore

< Page: 2 of 2 >