# HCP 1.9.1 Installation and demo, No results found in Kibana **URL:** \ **Category:** Elasticsearch\ **Created:** [May 9, 2019, 8:03am UTC](https://discuss.elastic.co/t/hcp-1-9-1-installation-and-demo-no-results-found-in-kibana/180308 "2019-05-09T08:03:24Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![deodion](https://avatars.discourse-cdn.com/v4/letter/d/eb8c5e/32.png) [@deodion](https://discuss.elastic.co/u/deodion)\ **Post date:** [May 9, 2019, 8:03am UTC](https://discuss.elastic.co/t/hcp-1-9-1-installation-and-demo-no-results-found-in-kibana/180308/1 "2019-05-09T08:03:24Z")
Since this situation feels like related to elasticsearch index, I post it here, I have installed and working HCP 1.9.1 After that, when I try the learning and training tutorial described at: [https://docs.hortonworks.com/HDPDocuments/HCP1/HCP-1.9.1/runbook-overview/index.html](https://docs.hortonworks.com/HDPDocuments/HCP1/HCP-1.9.1/runbook-overview/index.html) I get to the point where I'm not able to see the Squid log in elasticsearch index, I'm really stuck at here, > **[Verify That the Events Are Indexed](https://docs.cloudera.com/HDPDocuments/HCP1/HCP-1.9.1/add-new-telemetry/content/verify_that_the_events_are_indexed.html)** > > After you finish adding your new data source, you should verify that the data source events are indexed and the output matches any Stellar transformation functions you used. default index was created, my work around was to use this: [logstash default index - Pastebin.com](https://pastebin.com/9TPV5XQN) and I also use this: [Squid demo index for HCP Hortonworks - Pastebin.com](https://pastebin.com/9WSmhNAn) tcpdump -A -i ens192 src \ from my single elasticsearch host shows this: > 12:16:16.224880 IP HCP10-DataSource1.33810 \> HCP9-MetronSearch1.ircu-3: Flags [P.], seq 1490977535:1490977718, ack 1135751061, win 31088, options [nop,nop,TS val 10936402 ecr 10787491], length 183 > 2. E....[@.@.'. > > - .. > - ......X...C./...yp....... > > 1. ...R...............y. > 2. nifi-squid....u0......squid.......................v..6-.........h1557378975.223 232 127.0.0.1 TCP\_MISS/302 280 GET [http://www.atmape.ru/](http://www.atmape.ru/) - HIER\_DIRECT/36.86.63.182 - > > - 12:16:21.226164 ARP, Reply HCP10-DataSource1 is-at 00:50:56:99:6b:51 (oui Unknown), length 46 > > 1. .........PV.kQ > > - ...PV..4 > - .................... But no result found in Kibana, ![2019-05-09_121756](https://us1.discourse-cdn.com/elastic/original/3X/6/1/61ace08bbcadaabe7c66591d72a247f1adcc689c.png) **Any help thank you!** ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [May 9, 2019, 8:13am UTC](https://discuss.elastic.co/t/hcp-1-9-1-installation-and-demo-no-results-found-in-kibana/180308/2 "2019-05-09T08:13:44Z")
It's not really clear where Logstash comes into things here. Are you able to clarify? Also that looks like a really old version of the stack, v5, can you upgrade? ---
**Author:** ![deodion](https://avatars.discourse-cdn.com/v4/letter/d/eb8c5e/32.png) [@deodion](https://discuss.elastic.co/u/deodion)\ **Post date:** [May 9, 2019, 8:24am UTC](https://discuss.elastic.co/t/hcp-1-9-1-installation-and-demo-no-results-found-in-kibana/180308/3 "2019-05-09T08:24:05Z")
Hello warkolm, I edited first post and deleted logstash as it may not appropriate/confusing, I use Hortonworks HCP management pack to install elasticsearch, so its automatically use given version, [http://public-repo-1.hortonworks.com/HCP/centos7/1.x/updates/1.9.1.0/tars/metron/elasticsearch\_mpack-1.9.1.0-6.tar.gz](http://public-repo-1.hortonworks.com/HCP/centos7/1.x/updates/1.9.1.0/tars/metron/elasticsearch_mpack-1.9.1.0-6.tar.gz) Im not sure upgrading will make this work, but will consider it, ---
**Author:** ![deodion](https://avatars.discourse-cdn.com/v4/letter/d/eb8c5e/32.png) [@deodion](https://discuss.elastic.co/u/deodion)\ **Post date:** [May 9, 2019, 2:17pm UTC](https://discuss.elastic.co/t/hcp-1-9-1-installation-and-demo-no-results-found-in-kibana/180308/4 "2019-05-09T14:17:28Z")
the resolution was to resolve the always complaining: ERROR [KafkaApi-1001] Number of alive brokers '2' does not meet the required replication factor '3' for the offsets topic (configured via 'offsets.topic.replication.factor'). This error can be ignored if the cluster is starting up and not all brokers are up yet. (kafka.server.KafkaApis) I have this HCP setup as demo, and only have 2 kafka brokers, just simply goto Ambari/Kafka/configs then change offsets.topic.replication.factor=2, restart kafka and metron, ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 6, 2019, 2:17pm UTC](https://discuss.elastic.co/t/hcp-1-9-1-installation-and-demo-no-results-found-in-kibana/180308/5 "2019-06-06T14:17:31Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.