Try this, delete Kibana indexes then on a client or on the host load Filebeat (see here)
Then run "filebeat.sh -e -modules=system,auditd -setup" - this will add the searches, visualizations and dashboards for Filebeat system and auditd.
Start Filebeat on your client(s) and then look at Kibana after a minute. You should see it has a filebeat-* index and that there are events in Discover. Check out the Dashboard section for the Filebeat dashboards.
This worked for me. I have stayed away from the index refresh, it seems to corrupt things.