15 lines
551 B
Plaintext
15 lines
551 B
Plaintext
|
[role="xpack"]
|
||
|
|
[[internal-users]]
|
||
|
|
=== Internal users
|
||
|
|
|
||
|
|
The {stack-security-features} use three _internal_ users (`_system`, `_xpack`,
|
||
|
|
and `_xpack_security`), which are responsible for the operations that take place
|
||
|
|
inside an {es} cluster.
|
||
|
|
|
||
|
|
These users are only used by requests that originate from within the cluster.
|
||
|
|
For this reason, they cannot be used to authenticate against the API and there
|
||
|
|
is no password to manage or reset.
|
||
|
|
|
||
|
|
From time-to-time you may find a reference to one of these users inside your
|
||
|
|
logs, including <<auditing, audit logs>>.
|