# Elasticsearch DB backup for last one hour for a particular index

**URL:** <https://discuss.elastic.co/t/elasticsearch-db-backup-for-last-one-hour-for-a-particular-index/238377>\
**Category:** Elasticsearch\
**Created:** [June 24, 2020, 5:33am UTC](https://discuss.elastic.co/t/elasticsearch-db-backup-for-last-one-hour-for-a-particular-index/238377 "2020-06-24T05:33:51Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![ad1982](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ad1982/32/45433_2.png) [@ad1982](https://discuss.elastic.co/u/ad1982)\
**Post date:** [June 24, 2020, 5:33am UTC](https://discuss.elastic.co/t/elasticsearch-db-backup-for-last-one-hour-for-a-particular-index/238377/1 "2020-06-24T05:33:51Z")

</div>

Is there a way to take a backup a particular index for just the last 1 hour ? snapshot doesnt provide the time period option? Any ideas?

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [June 24, 2020, 5:44am UTC](https://discuss.elastic.co/t/elasticsearch-db-backup-for-last-one-hour-for-a-particular-index/238377/2 "2020-06-24T05:44:17Z")

</div>

Snapshots backup complete indices only, not partial data.

---

<div class="post-metadata">

**Author:** ![ad1982](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ad1982/32/45433_2.png) [@ad1982](https://discuss.elastic.co/u/ad1982)\
**Post date:** [June 24, 2020, 5:45am UTC](https://discuss.elastic.co/t/elasticsearch-db-backup-for-last-one-hour-for-a-particular-index/238377/3 "2020-06-24T05:45:54Z")

</div>

Yes figured that out, any other way to get partial data backed up?

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [June 24, 2020, 6:28am UTC](https://discuss.elastic.co/t/elasticsearch-db-backup-for-last-one-hour-for-a-particular-index/238377/4 "2020-06-24T06:28:53Z")

</div>

You can run a scroll search with a filter on the timestamp field (supposing you have one). And store the result on disk.  
You would need to write code for that.

You can use reindex api to reindex the last hour in another index and then run a snapshot of this index. Then drop the index.

---

<div class="post-metadata">

**Author:** ![ad1982](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ad1982/32/45433_2.png) [@ad1982](https://discuss.elastic.co/u/ad1982)\
**Post date:** [June 24, 2020, 6:38am UTC](https://discuss.elastic.co/t/elasticsearch-db-backup-for-last-one-hour-for-a-particular-index/238377/5 "2020-06-24T06:38:19Z")

</div>

Thanks was thinking on the same lines, was also exploring elasticdump utility [https://www.npmjs.com/package/elasticdump](https://www.npmjs.com/package/elasticdump)

---

<div class="post-metadata">

**Author:** ![ad1982](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ad1982/32/45433_2.png) [@ad1982](https://discuss.elastic.co/u/ad1982)\
**Post date:** [June 24, 2020, 6:51am UTC](https://discuss.elastic.co/t/elasticsearch-db-backup-for-last-one-hour-for-a-particular-index/238377/6 "2020-06-24T06:51:38Z")

</div>

Can Reindex be done with start and end time filter params?

---

<div class="post-metadata">

**Author:** ![ad1982](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ad1982/32/45433_2.png) [@ad1982](https://discuss.elastic.co/u/ad1982)\
**Post date:** [June 24, 2020, 7:04am UTC](https://discuss.elastic.co/t/elasticsearch-db-backup-for-last-one-hour-for-a-particular-index/238377/7 "2020-06-24T07:04:51Z")

</div>

Please ignore figured this out. Thanks for the great help

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 22, 2020, 7:04am UTC](https://discuss.elastic.co/t/elasticsearch-db-backup-for-last-one-hour-for-a-particular-index/238377/8 "2020-07-22T07:04:52Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
