# Kibana - Failed to query events data **URL:** https://discuss.elastic.co/t/kibana-failed-to-query-events-data/281699 **Category:** Kibana **Created:** [August 17, 2021, 2:08pm UTC](https://discuss.elastic.co/t/kibana-failed-to-query-events-data/281699 "2021-08-17T14:08:38Z") **Posts on this page:** 1 **Showing post:** 7
### Author: ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb) #### Post date: [August 21, 2021, 5:36am UTC](https://discuss.elastic.co/t/kibana-failed-to-query-events-data/281699/7 "2021-08-21T05:36:22Z")
Looks like you did not run `setup`. setup sets up the correct mappings, ingest pipeline etc. Hopefully your are following the steps closely in the Quick start guide Setup see [here](https://www.elastic.co/guide/en/beats/auditbeat/current/auditbeat-installation-configuration.html#setup-assets) Auditbeat Quick start guide [here](https://www.elastic.co/guide/en/beats/auditbeat/current/auditbeat-installation-configuration.html) If you do not run setup your mappings will not be correct which is what your issue looks like to me. Also if you Architecture is Auditbeat \> Logstash \> Elasticsearch you need to follow this process. This example is metricbeat but same process > [@Metricbeat to Logstash to ElasticSearch - Cannot See Any Hosts Defined, But Data Is Definitely Coming In](https://discuss.elastic.co/t/metricbeat-to-logstash-to-elasticsearch-cannot-see-any-hosts-defined-but-data-is-definitely-coming-in/275715/2): > > Hi @jthart Welcome to the community apologies that you're having some struggles getting this set up Perhaps we can help. Assuming you want to run an architecture like this Metricbeat (1 to Many) -\> Logstash -\> Elasticsearch Basically using Logstash as a collect and pass through Here is my recommendation try to resist the urge to make this more complex. Do not try to manually load index templates dashboards anything else follow the quick start / basic setup. Clean everything up we're star… Also I would get Auditbeat \> Elasticsearch working first then introduce Logstash --- _[View the full topic](https://discuss.elastic.co/t/kibana-failed-to-query-events-data/281699)._