Accidentally deleted synthetic browser data stream

Elastic Stack Elasticsearch
1

Hello, I accidentally deleted the datastream from synthetic browser via kibana UI,

Stack management -> index management -> data stream

This datastream was in a space so it had a namespace in its name

synthetics-browser-myspace

after deleting the datastream, I created a new multistep journey monitor, but it hangs and never starts

When creating a new monitor, the datastream is not recreated?

What can I do to get it working again?

2

I check the logs from the agent an this is the message:

"message": "Cannot index event publisher.Event{Content:beat.Event{Timestamp:time.Date(2025, time.January, 8, 15, 24, 40, 218156576, time.Local), ...
"reason":"unknown index sort field:[url.full.keyword]"}, dropping event!"

So I read the settings of another index pattern from another space for the same type of monitor, but stil doesnt work:

PUT _index_template/custom-synth-template
{
  "index_patterns": ["synthetics-browser-myspace"],
  "data_stream": {},
  "composed_of": ["synthetics-browser@package",
"synthetics-browser@custom",".fleet_globals-1",".fleet_agent_id_verification-1"],
  "template": {
    "settings": {
      "index.lifecycle.name" : "synthetics-synthetics.browser-default_policy"
    }
  }
}

UPDATE ---

I just create a new component template and delete the sort by url.full.keyword, just left monitor.id

              "sort": {
                "field": [
                  "monitor.id"
                ]
              }

detelete the old index template, and create a new one

PUT _index_template/custom-synth-template
{
  "index_patterns": ["synthetics-browser-myspace"],
  "data_stream": {},
  "composed_of": ["my-custom-component-template",".fleet_globals-1",".fleet_agent_id_verification-1"]
}

but still the same error