# Accidentally deleted synthetic browser data stream

**URL:** <https://discuss.elastic.co/t/accidentally-deleted-synthetic-browser-data-stream/372938>\
**Category:** Elasticsearch\
**Created:** [January 8, 2025, 2:30pm UTC](https://discuss.elastic.co/t/accidentally-deleted-synthetic-browser-data-stream/372938 "2025-01-08T14:30:07Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Emanuel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/emanuel/32/140543_2.png) [@Emanuel](https://discuss.elastic.co/u/Emanuel)\
**Post date:** [January 8, 2025, 2:30pm UTC](https://discuss.elastic.co/t/accidentally-deleted-synthetic-browser-data-stream/372938/1 "2025-01-08T14:30:07Z")

</div>

Hello, I accidentally deleted the datastream from synthetic browser via kibana UI,

`Stack management -> index management -> data stream`

This datastream was in a space so it had a namespace in its name

`synthetics-browser-myspace`

after deleting the datastream, I created a new multistep journey monitor, but it hangs and never starts

When creating a new monitor, the datastream is not recreated?

What can I do to get it working again?

---

<div class="post-metadata">

**Author:** ![Emanuel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/emanuel/32/140543_2.png) [@Emanuel](https://discuss.elastic.co/u/Emanuel)\
**Post date:** [January 8, 2025, 3:57pm UTC](https://discuss.elastic.co/t/accidentally-deleted-synthetic-browser-data-stream/372938/2 "2025-01-08T15:57:58Z")

</div>

I check the logs from the agent an this is the message:

```auto
"message": "Cannot index event publisher.Event{Content:beat.Event{Timestamp:time.Date(2025, time.January, 8, 15, 24, 40, 218156576, time.Local), ...
"reason":"unknown index sort field:[url.full.keyword]"}, dropping event!"

```

So I read the settings of another index pattern from another space for the same type of monitor, but stil doesnt work:

```auto
PUT _index_template/custom-synth-template
{
  "index_patterns": ["synthetics-browser-myspace"],
  "data_stream": {},
  "composed_of": ["synthetics-browser@package",
"synthetics-browser@custom",".fleet_globals-1",".fleet_agent_id_verification-1"],
  "template": {
    "settings": {
      "index.lifecycle.name" : "synthetics-synthetics.browser-default_policy"
    }
  }
}

```

UPDATE ---

I just create a new component template and delete the sort by url.full.keyword, just left monitor.id

```auto
              "sort": {
                "field": [
                  "monitor.id"
                ]
              }

```

detelete the old index template, and create a new one

```auto
PUT _index_template/custom-synth-template
{
  "index_patterns": ["synthetics-browser-myspace"],
  "data_stream": {},
  "composed_of": ["my-custom-component-template",".fleet_globals-1",".fleet_agent_id_verification-1"]
}

```

but still the same error