Error when install ELK mpack-3.0.0.0-1

[mediapills]

I am trying to install elasticsearch_mpack-3.0.0.0-1.tar.gz using command:

$ ambari-server install-mpack --mpack=https://github.com/steven-matison/dfhz_elk_mpack/raw/master/elasticsearch_mpack-3.0.0.0-1.tar.gz --verbose

Here is the trace back what I am getting during service setup via Ambari UI:

Traceback (most recent call last):
  File "/var/lib/ambari-agent/cache/stack-hooks/before-ANY/scripts/hook.py", line 38, in <module>
    BeforeAnyHook().execute()
  File "/usr/lib/ambari-agent/lib/resource_management/libraries/script/script.py", line 351, in execute
    method(env)
  File "/var/lib/ambari-agent/cache/stack-hooks/before-ANY/scripts/hook.py", line 31, in hook
    setup_users()
  File "/var/lib/ambari-agent/cache/stack-hooks/before-ANY/scripts/shared_initialization.py", line 50, in setup_users
    groups = params.user_to_groups_dict[user],
KeyError: u'logstash'
Error: Error: Unable to run the custom hook script ['/usr/bin/python', '/var/lib/ambari-agent/cache/stack-hooks/before-ANY/scripts/hook.py', 'ANY', '/var/lib/ambari-agent/data/command-603.json', '/var/lib/ambari-agent/cache/stack-hooks/before-ANY', '/var/lib/ambari-agent/data/structured-out-603.json', 'INFO', '/var/lib/ambari-agent/tmp', 'PROTOCOL_TLSv1_2', '']

I also have tried to run:

$ yum --disablerepo=* --enablerepo=epel search elasticsearch

ambari-agent: 2.7.1.0-169 HDP: 3.0.1_virtualbox_181205