I've just setup a completely new ELK environment and began testing it with the installation of Auditbeat on a Windows Server 2012 R2 machine.
When running the dashboard setup from Powershell it confirms successful installation and I can see the Visualisations and Dashboards in Kibana, however when clicking into any of the Dashboards I get the following two errors at the top of the page:
Saved "field" parameter is now invalid. Please select a new field.
Visualize: "field" is a required parameter
Likewise, clicking into the [Auditbeat File Integrity] Overview Dashboard I get the following errors on the page:
Could not locate that index-pattern-field (id: file.group)
Could not locate that index-pattern-field (id: file.path.raw)
Could not locate that index-pattern-field (id: file.mode)
Having removed the index, all visualisations, searches, dashboards etc and completed the setup again I still get the same error.
Have I missed something obvious?