# Snapshot of system indexes no longer working

**URL:** <https://discuss.elastic.co/t/snapshot-of-system-indexes-no-longer-working/304063>\
**Category:** Kibana\
**Tags:** docker, slm-snapshot-lifecycle-management\
**Created:** [May 5, 2022, 7:17pm UTC](https://discuss.elastic.co/t/snapshot-of-system-indexes-no-longer-working/304063 "2022-05-05T19:17:57Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![UweW](https://avatars.discourse-cdn.com/v4/letter/u/ed8c4c/32.png) [@UweW](https://discuss.elastic.co/u/UweW)\
**Post date:** [May 5, 2022, 7:17pm UTC](https://discuss.elastic.co/t/snapshot-of-system-indexes-no-longer-working/304063/1 "2022-05-05T19:17:57Z")

</div>

Hi,  
I have snapshot which saves the system files like .kibana\* .  
This is no longer working since one of the latest updates.  
In my case with a pattern of .kibana\* only .kibana-event\* are saved. Nothing else.  
I see that behavior on 2 stack running 8.1. On a stack running 7.16.2 anything is fine.  
Maybe a bug ?

works (7.16.2)

```auto
PUT _slm/policy/daily_Kibana_and_System
{
  "name": "<kibana-system-{now/d}>",
  "schedule": "0 10 0 * * ?",
  "repository": "cc-nfs-repository",
  "config": {
    "indices": [
      ".async*",
      ".fleet*",
      ".item*",
      ".kibana_*",
      ".lists*",
      ".reporting*",
      ".security*",
      ".tasks*"
    ],
    "ignore_unavailable": true,
    "partial": true
  },
  "retention": {
    "expire_after": "30d",
    "min_count": 5
  }
}

```

doesn't work under 8.1:

```auto
PUT _slm/policy/weekly-kibana
{
  "name": "weekly-kibana",
  "schedule": "0 30 1 * * ?",
  "repository": "my_backup",
  "config": {
    "indices": [
      ".kibana_*"
    ],
    "ignore_unavailable": true,
    "partial": true
  },
  "retention": {
    "max_count": 8
  }
}

```

Best regards Uwe

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [May 5, 2022, 11:33pm UTC](https://discuss.elastic.co/t/snapshot-of-system-indexes-no-longer-working/304063/2 "2022-05-05T23:33:16Z")

</div>

> [@UweW](#):
>
> In my case with a pattern of .kibana\*

Your patterns are `".kibana_*",` though?

---

<div class="post-metadata">

**Author:** ![UweW](https://avatars.discourse-cdn.com/v4/letter/u/ed8c4c/32.png) [@UweW](https://discuss.elastic.co/u/UweW)\
**Post date:** [May 6, 2022, 7:41am UTC](https://discuss.elastic.co/t/snapshot-of-system-indexes-no-longer-working/304063/3 "2022-05-06T07:41:23Z")

</div>

yes .kibana\_\*

---

<div class="post-metadata">

**Author:** ![UweW](https://avatars.discourse-cdn.com/v4/letter/u/ed8c4c/32.png) [@UweW](https://discuss.elastic.co/u/UweW)\
**Post date:** [May 7, 2022, 8:10am UTC](https://discuss.elastic.co/t/snapshot-of-system-indexes-no-longer-working/304063/4 "2022-05-07T08:10:16Z")

</div>

even when I run a "All data streams and indices, including system indices" snapshot  
The .kibana\_\* indexes are no longer saved.  
So no longer a full backup possible!

---

<div class="post-metadata">

**Author:** ![UweW](https://avatars.discourse-cdn.com/v4/letter/u/ed8c4c/32.png) [@UweW](https://discuss.elastic.co/u/UweW)\
**Post date:** [May 12, 2022, 4:20pm UTC](https://discuss.elastic.co/t/snapshot-of-system-indexes-no-longer-working/304063/5 "2022-05-12T16:20:44Z")

</div>

sad that no one cares if you can't restore your system from the snapshot. Seems to be a bug.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 9, 2022, 4:20pm UTC](https://discuss.elastic.co/t/snapshot-of-system-indexes-no-longer-working/304063/6 "2022-06-09T16:20:55Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.