# Unfortunately I have deleted some index files

**URL:** <https://discuss.elastic.co/t/unfortunately-i-have-deleted-some-index-files/287878>\
**Category:** Elasticsearch\
**Tags:** docker\
**Created:** [October 28, 2021, 6:02am UTC](https://discuss.elastic.co/t/unfortunately-i-have-deleted-some-index-files/287878 "2021-10-28T06:02:56Z")\
**Posts on this page:** 19\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ravinder28](https://avatars.discourse-cdn.com/v4/letter/r/3bc359/32.png) [@Ravinder28](https://discuss.elastic.co/u/Ravinder28)\
**Post date:** [October 28, 2021, 6:02am UTC](https://discuss.elastic.co/t/unfortunately-i-have-deleted-some-index-files/287878/1 "2021-10-28T06:02:56Z")

</div>

unfortunately i have deleted some index files in below path.

home/Elasticsearch/data/nodes/0/indices/

Elasticsearch is stopped and we are trying to restart the Elasticsearch but am getting below error.

"[2021-10-25T11:11:54,159][ERROR][o.e.g.GatewayMetaState] [app\_node] failed to read or upgrade local state, exiting...  
java.io.IOException: failed to find metadata for existing index appnode-2021.09.25 [location: gyK9xHNfTO-vTzqEg0YqpQ, generation: 18]"

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [October 28, 2021, 6:09am UTC](https://discuss.elastic.co/t/unfortunately-i-have-deleted-some-index-files/287878/2 "2021-10-28T06:09:17Z")

</div>

Directly deleting files from the data directory is not supported and can cause corruption, which seems to be the case here. If you have a single node cluster I suspect you will need to restore data from a snapshot.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 28, 2021, 6:16am UTC](https://discuss.elastic.co/t/unfortunately-i-have-deleted-some-index-files/287878/3 "2021-10-28T06:16:28Z")

</div>

Otherwise you will need to delete all the data in the cluster and reingest it.

---

<div class="post-metadata">

**Author:** ![Ravinder28](https://avatars.discourse-cdn.com/v4/letter/r/3bc359/32.png) [@Ravinder28](https://discuss.elastic.co/u/Ravinder28)\
**Post date:** [October 28, 2021, 6:22am UTC](https://discuss.elastic.co/t/unfortunately-i-have-deleted-some-index-files/287878/4 "2021-10-28T06:22:01Z")

</div>

Hi, Thanks Christian.  
Is possible can you please elaborate how to restore from snapshot.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [October 28, 2021, 6:25am UTC](https://discuss.elastic.co/t/unfortunately-i-have-deleted-some-index-files/287878/5 "2021-10-28T06:25:07Z")

</div>

This requires that you have previously backed up your data using the [snapshot API](https://www.elastic.co/guide/en/elasticsearch/reference/7.15/snapshot-restore-apis.html). If you have done that you just spin up a new clean node and use the restore API.

If you do not have a snapshot to fall back on I suspect your data may be lost.

---

<div class="post-metadata">

**Author:** ![Ravinder28](https://avatars.discourse-cdn.com/v4/letter/r/3bc359/32.png) [@Ravinder28](https://discuss.elastic.co/u/Ravinder28)\
**Post date:** [October 28, 2021, 6:41am UTC](https://discuss.elastic.co/t/unfortunately-i-have-deleted-some-index-files/287878/6 "2021-10-28T06:41:54Z")

</div>

Thanks,

is there any possibility to import the index files which are available now in data folder OR any possibilities to edit the **.st** file.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [October 28, 2021, 6:42am UTC](https://discuss.elastic.co/t/unfortunately-i-have-deleted-some-index-files/287878/7 "2021-10-28T06:42:52Z")

</div>

Not that I know of, but others with more in-depth knowledge in this area might know better.

---

<div class="post-metadata">

**Author:** ![Ravinder28](https://avatars.discourse-cdn.com/v4/letter/r/3bc359/32.png) [@Ravinder28](https://discuss.elastic.co/u/Ravinder28)\
**Post date:** [October 28, 2021, 6:44am UTC](https://discuss.elastic.co/t/unfortunately-i-have-deleted-some-index-files/287878/8 "2021-10-28T06:44:16Z")

</div>

Thanks Warkolm,

Is there any possibility to import the index files which are available now in data folder OR any possibilities to edit the **.st** file.

---

<div class="post-metadata">

**Author:** ![Ravinder28](https://avatars.discourse-cdn.com/v4/letter/r/3bc359/32.png) [@Ravinder28](https://discuss.elastic.co/u/Ravinder28)\
**Post date:** [October 28, 2021, 6:45am UTC](https://discuss.elastic.co/t/unfortunately-i-have-deleted-some-index-files/287878/9 "2021-10-28T06:45:08Z")

</div>

Okay, Thank you

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [October 28, 2021, 6:47am UTC](https://discuss.elastic.co/t/unfortunately-i-have-deleted-some-index-files/287878/10 "2021-10-28T06:47:41Z")

</div>

If it is the cluster that that is corrupted I suspect the data is lost. If it was a single index you might have been able to recover at least some of the data.

---

<div class="post-metadata">

**Author:** ![Ravinder28](https://avatars.discourse-cdn.com/v4/letter/r/3bc359/32.png) [@Ravinder28](https://discuss.elastic.co/u/Ravinder28)\
**Post date:** [October 28, 2021, 12:27pm UTC](https://discuss.elastic.co/t/unfortunately-i-have-deleted-some-index-files/287878/11 "2021-10-28T12:27:45Z")

</div>

HI,

I have created another subpolder into it and changed the data path in Elasticsearch.yml and started Elasticsearch.

Now Elasticsearch is running but KIBANA is not starting, getting below error. Can you please help me.

Failed to poll for work: [search\_phase\_execution\_exception] all shards failed :: {

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/a/4/a431de767018a0b57573f69995532734441aa6d7.jpeg)

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 29, 2021, 12:28am UTC](https://discuss.elastic.co/t/unfortunately-i-have-deleted-some-index-files/287878/12 "2021-10-29T00:28:34Z")

</div>

Please don't post pictures of text or code. They are difficult to read, impossible to search and replicate (if it's code), and some people may not be even able to see them 🙂

---

<div class="post-metadata">

**Author:** ![Ravinder28](https://avatars.discourse-cdn.com/v4/letter/r/3bc359/32.png) [@Ravinder28](https://discuss.elastic.co/u/Ravinder28)\
**Post date:** [November 8, 2021, 9:12am UTC](https://discuss.elastic.co/t/unfortunately-i-have-deleted-some-index-files/287878/13 "2021-11-08T09:12:55Z")

</div>

Hi, while am starting KIBANA, am facing below error.

type":"log","@timestamp":"2021-11-08T09:07:04Z","tags":["error","Elasticsearch","admin"],"pid":30607,"message":"Request error, retrying\nPOST

---

<div class="post-metadata">

**Author:** ![Ravinder28](https://avatars.discourse-cdn.com/v4/letter/r/3bc359/32.png) [@Ravinder28](https://discuss.elastic.co/u/Ravinder28)\
**Post date:** [November 8, 2021, 12:01pm UTC](https://discuss.elastic.co/t/unfortunately-i-have-deleted-some-index-files/287878/14 "2021-11-08T12:01:10Z")

</div>

Hi, while am starting KIBANA, am facing below error.

type":"log","@timestamp":"2021-11-08T09:07:04Z","tags":["error","Elasticsearch","admin"],"pid":30607,"message":"Request error, retrying\nPOST

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [November 8, 2021, 12:24pm UTC](https://discuss.elastic.co/t/unfortunately-i-have-deleted-some-index-files/287878/15 "2021-11-08T12:24:46Z")

</div>

Is Elasticsearch healthy? Is the status green?

---

<div class="post-metadata">

**Author:** ![Ravinder28](https://avatars.discourse-cdn.com/v4/letter/r/3bc359/32.png) [@Ravinder28](https://discuss.elastic.co/u/Ravinder28)\
**Post date:** [November 8, 2021, 12:38pm UTC](https://discuss.elastic.co/t/unfortunately-i-have-deleted-some-index-files/287878/16 "2021-11-08T12:38:15Z")

</div>

its running healthy

---

<div class="post-metadata">

**Author:** ![Ravinder28](https://avatars.discourse-cdn.com/v4/letter/r/3bc359/32.png) [@Ravinder28](https://discuss.elastic.co/u/Ravinder28)\
**Post date:** [November 8, 2021, 12:49pm UTC](https://discuss.elastic.co/t/unfortunately-i-have-deleted-some-index-files/287878/17 "2021-11-08T12:49:40Z")

</div>

its running, cluster is showing yellow

---

<div class="post-metadata">

**Author:** ![Ravinder28](https://avatars.discourse-cdn.com/v4/letter/r/3bc359/32.png) [@Ravinder28](https://discuss.elastic.co/u/Ravinder28)\
**Post date:** [November 10, 2021, 9:24am UTC](https://discuss.elastic.co/t/unfortunately-i-have-deleted-some-index-files/287878/18 "2021-11-10T09:24:18Z")

</div>

HI,

am checking the metricbeat dashboards, but am unable to see any info in system overview.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/4/748095347b532738736f18a3a2cf1e1c5ddaf283.png)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 8, 2021, 9:25am UTC](https://discuss.elastic.co/t/unfortunately-i-have-deleted-some-index-files/287878/19 "2021-12-08T09:25:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
