# Indexes not found after x-pack install **URL:** \ **Category:** Kibana\ **Created:** [March 2, 2018, 2:41pm UTC](https://discuss.elastic.co/t/indexes-not-found-after-x-pack-install/122275 "2018-03-02T14:41:13Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![RayS](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rays/32/28268_2.png) [@RayS](https://discuss.elastic.co/u/RayS)\ **Post date:** [March 2, 2018, 2:41pm UTC](https://discuss.elastic.co/t/indexes-not-found-after-x-pack-install/122275/1 "2018-03-02T14:41:13Z")
I know this feels like beating a dead horse a little bit (I've searched this topic a lot in the forums but have yet to find an answer)....but this has really got me stumped. I had ElasticSearch and Kibana running with WinlogBeat and Heartbeat sending data to Elasticsearch for about 2 days. I had the index Pattern setup and the Heartbeat dashboard working. I then install x-pack and they no longer show data. I decided to delete both the winLogbeat-\* and the heartbeat-\* indexes from Kibana hoping to recreate them and now Kibana (under Management, Index Patterns) says "Couldn't find any Elasticsearch data". I then uninstalled x-pack and I could recreate the indexes just fine. I feel like I'm missing a critical piece of the x-pack install/config. Open to any suggestions. ---
**Author:** ![Marius\_Dragomir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_dragomir/32/42087_2.png) [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)\ **Post date:** [March 3, 2018, 6:47am UTC](https://discuss.elastic.co/t/indexes-not-found-after-x-pack-install/122275/2 "2018-03-03T06:47:41Z")
We should start by looking in the ES cluster to see if the indices are truly gone or if it's just Kibana that can't find them. Can you post the answer of a `_cat/indices` to your ES cluster? I would say try it first from the Kibana Console (from Dev Tools) and if that shows nothing, try it from cURL as well. ---
**Author:** ![RayS](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rays/32/28268_2.png) [@RayS](https://discuss.elastic.co/u/RayS)\ **Post date:** [March 5, 2018, 4:42pm UTC](https://discuss.elastic.co/t/indexes-not-found-after-x-pack-install/122275/3 "2018-03-05T16:42:28Z")
OK, so here is what I have done. I removed x-pack and got the system back to what I had before. I have heartbeat running monitoring a couple things (1-icmp and 1-http) and I have one server running winlogbeat. Here is a screen shot from the ES showing the current indexes: ![101_9200 __cat_indices__ beat__v%26s%3Dindex_desc](https://us1.discourse-cdn.com/elastic/original/3X/9/2/9230f94ed893942871d9e4f000ddcb0f0374f647.png) Here is a screen shot from the Kibana showing the data from those indexes: ![2018-03-05%2009_42_50-Discover%20-%20Kibana](https://us1.discourse-cdn.com/elastic/original/3X/2/0/20209e87fa2ab20e42b2f2d002f8bd92f882f21f.png) Next I installed x-pack on ES per the instructions: ![2018-03-05%2009_57_19-rseals%40navstlelk01__home_rseals](https://us1.discourse-cdn.com/elastic/original/3X/1/f/1ff5018cc64f59936ce387743f399388ad7c9f66.png) And Kibana: ![2018-03-05%2010_35_13-Indexes%20not%20found%20after%20x-pack%20install%20-%20Kibana%20-%20Discuss%20the%20Elastic%20Stack](https://us1.discourse-cdn.com/elastic/original/3X/4/5/45805e80f6f8c347c1a4d521d2eea72ad40bdd75.png) NOTE: Even though it says Kibana restarted I find a nice reboot tends to make everything a little happier. Now when I go into Kibana I see this: ![2018-03-05%2010_38_56-Discover%20-%20Kibana](https://us1.discourse-cdn.com/elastic/original/3X/5/5/5570bdaff818a2415015548521c9903bffdb7cd2.png) And here is a screen shot of the ES Indexes: ![101_9200 __cat_indices___ v%26s%3Dindex_desc](https://us1.discourse-cdn.com/elastic/original/3X/9/2/92b0624cf80a89d07edbc2c5123443b7fba2fc35.png) And a screenshot of the Kibana Management console: ![2018-03-05%2010_41_28-winlogbeat-_%20-%20Kibana](https://us1.discourse-cdn.com/elastic/original/3X/f/3/f3e40d70d77eaf018e695387114fbf6b993fd481.png) Oh and here is what I get when I try to create new indexes: ![2018-03-05%2010_44_31-Settings](https://us1.discourse-cdn.com/elastic/original/3X/0/5/053ffab624d2c1f69849a4321f92df2a3df2111c.png) Hope this explains things a little better. Sorry for being screenshot happy. ---
**Author:** ![Marius\_Dragomir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_dragomir/32/42087_2.png) [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)\ **Post date:** [March 8, 2018, 5:16pm UTC](https://discuss.elastic.co/t/indexes-not-found-after-x-pack-install/122275/4 "2018-03-08T17:16:40Z")
What user are you using to log in into Kibana? Did you set any specific permission for it? ---
**Author:** ![RayS](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rays/32/28268_2.png) [@RayS](https://discuss.elastic.co/u/RayS)\ **Post date:** [March 12, 2018, 3:42pm UTC](https://discuss.elastic.co/t/indexes-not-found-after-x-pack-install/122275/5 "2018-03-12T15:42:51Z")
Found my problem. After X-Pack install I was logging into Kibana as Kibana. I needed to login as elastic and then add the proper user accounts. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [April 9, 2018, 3:43pm UTC](https://discuss.elastic.co/t/indexes-not-found-after-x-pack-install/122275/6 "2018-04-09T15:43:08Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.