# Cant find messages in index witch recoverih from dump **URL:** \ **Category:** Elasticsearch\ **Created:** [September 24, 2014, 11:35am UTC](https://discuss.elastic.co/t/cant-find-messages-in-index-witch-recoverih-from-dump/19941 "2014-09-24T11:35:46Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![11167](https://avatars.discourse-cdn.com/v4/letter/1/4bbf92/32.png) [@11167](https://discuss.elastic.co/u/11167)\ **Post date:** [September 24, 2014, 11:35am UTC](https://discuss.elastic.co/t/cant-find-messages-in-index-witch-recoverih-from-dump/19941/1 "2014-09-24T11:35:46Z")
Hi! cant find messages fron graylog2, but i see this messages from elasticsearch graylog2-server 0.90.0-1 elasticsearch 0.90.10 my recover es\_dump\_restore dump [http://localhost:9200](http://localhost:9200) graylog2\_4 /tmp/24 service graylog2-server stop curl -XDELETE '[http://localhost:9200/graylog2\_4/](http://localhost:9200/graylog2_4/)' es\_dump\_restore restore [http://localhost:9200](http://localhost:9200) graylog2\_4 /tmp/24 curl -X GET '[http://localhost:9200/graylog2\_2/message/\_search?from=0&size=100&pretty](http://localhost:9200/graylog2_2/message/_search?from=0&size=100&pretty)' IN/CRON[24295]: (root) CMD (/root/scripts/mount.sh)","\_id":"34cc0e7b-43d9- 11e4-8e88-005056b7a176","source":"192.168.93.166","gl2\_source\_input":" 54180a9ae4b00c4cc83be9cd","gl2\_source\_node":"8ab9ff78-7a56-477e-a8c8- d7508bd5031e","streams":["54180b72e4b00c4cc83beab8"]} }, { "\_index" : "graylog2\_2", "\_type" : "message", "\_id" : "34cc5c91-43d9-11e4-8e88-005056b7a176", "\_score" : 1.0, "\_source" : {"timestamp":"2014-09-24 10:54:50.073"," message":"\<173\>Sep 24 14:54:59 testFE2 rootsh[02624]: kbmokeev: 071: Sep 24 07:00:01 testFE2 /USR/SB ........and more......... -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/8963ceda-1a1e-4e45-a5c4-a849e3e9672d%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/8963ceda-1a1e-4e45-a5c4-a849e3e9672d%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![11167](https://avatars.discourse-cdn.com/v4/letter/1/4bbf92/32.png) [@11167](https://discuss.elastic.co/u/11167)\ **Post date:** [September 24, 2014, 2:17pm UTC](https://discuss.elastic.co/t/cant-find-messages-in-index-witch-recoverih-from-dump/19941/2 "2014-09-24T14:17:00Z")
graylog2 debug 2014-09-24T18:07:55.810+04:00 DEBUG [type] [graylog2-server] [graylog2\_5][1 ], node[ouAGbNuWTjmIbIuPEK1A5g], [P], s[STARTED]: Failed to execute [org. elasticsearch.action.search.SearchRequest@5789c4c9] lastShard [true] org.elasticsearch.transport.RemoteTransportException: [second][inet[/192.168 .93.76:9300]][search/phase/query] Caused by: org.elasticsearch.search.SearchParseException: [graylog2\_5][1]: query[ConstantScore(_:_)],from[-1],size[-1]: Parse Failure [Failed to parse source [{"query":{"query\_string":{"query":"\*","allow\_leading\_wildcard":false }},"facets":{"histogram":{"date\_histogram":{"field":"timestamp","interval": "week"},"facet\_filter":{"bool":{"must":{"range":{"timestamp":{"from":"2014-08-25 14:07:55.787","to":"2014-09-24 14:07:55.788","include\_lower":true, "include\_upper":true}}}}}}}}]] at org.elasticsearch.search.SearchService.parseSource(SearchService.java: 581) at org.elasticsearch.search.SearchService.createContext(SearchService.java: 484) at org.elasticsearch.search.SearchService.createContext(SearchService.java: 469) at org.elasticsearch.search.SearchService.createAndPutContext(SearchService .java:462) at org.elasticsearch.search.SearchService.executeQueryPhase(SearchService. java:234) at org.elasticsearch.search.action. SearchServiceTransportAction$SearchQueryTransportHandler.messageReceived( SearchServiceTransportAction.java:623) at org.elasticsearch.search.action. SearchServiceTransportAction$SearchQueryTransportHandler.messageReceived( SearchServiceTransportAction.java:612) at org.elasticsearch.transport.netty.MessageChannelHandler$RequestHandler. run(MessageChannelHandler.java:270) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor. java:1145) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor. java:615) at java.lang.Thread.run(Thread.java:745) Caused by: java.lang.ClassCastException: org.elasticsearch.index.fielddata. plain.PagedBytesIndexFieldData cannot be cast to org.elasticsearch.index. fielddata.IndexNumericFieldData at org.elasticsearch.search.facet.datehistogram.DateHistogramFacetParser. parse(DateHistogramFacetParser.java:162) at org.elasticsearch.search.facet.FacetParseElement.parse(FacetParseElement .java:94) at org.elasticsearch.search.SearchService.parseSource(SearchService.java: 569) ... 10 more 2014-09-24T18:07:55.811+04:00 DEBUG [type] [graylog2-server] [graylog2\_5][0 -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/56715af4-e4ba-4f32-a6ca-d2002ea08512%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/56715af4-e4ba-4f32-a6ca-d2002ea08512%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 1:00am UTC](https://discuss.elastic.co/t/cant-find-messages-in-index-witch-recoverih-from-dump/19941/3 "2017-07-06T01:00:11Z")
Closed on July 6, 2017, 1:00am UTC