Hi @s_elk,
Could you go to Stack Management -> Advanced Settings (under Kibana section) -> Security Solution and check your Elasticsearch indices ? The defaults are apm-*-transaction*, auditbeat-*, endgame-*, filebeat-*, logs-*, packetbeat-*, winlogbeat-*.
Best,
Christos