I think it is related but after doing an install of x-pack and working through some permissions issues in Kibana all is back to normal except I can see logs going into elasticsearch by doing a tcpdump but none are showing in kibana.
I have the xpack.security.enabled: false all others set to true (xpack.graph, xpack.monitoring, xpack.watcher)
here is the output showing the cluster is green
epoch timestamp cluster status node.total node.data shards pri relo init unassign pending_tasks max_task_wait_time active_shards_percent
1492015000 16:36:40 scela-cluster-01 green 3 3 118 59 0 0 0 0 - 100.0%
I am just not able to get any new logs in from metric beats or some of our development applications.
Any Ideas what I am missing