2018-05-14 18:35:02 -04:00
|
|
|
[role="xpack"]
|
2018-05-02 15:08:02 -04:00
|
|
|
[[internal-users]]
|
|
|
|
|
=== Internal users
|
|
|
|
|
|
|
|
|
|
{security} has three _internal_ users (`_system`, `_xpack`, and `_xpack_security`)
|
|
|
|
|
that are responsible for the operations that take place inside an {es} cluster.
|
|
|
|
|
|
|
|
|
|
These users are only used by requests that originate from within the cluster.
|
|
|
|
|
For this reason, they cannot be used to authenticate against the API and there
|
|
|
|
|
is no password to manage or reset.
|
|
|
|
|
|
|
|
|
|
From time-to-time you may find a reference to one of these users inside your
|
|
|
|
|
logs, including <<auditing, audit logs>>.
|
