2019-10-04 11:19:10 -04:00
|
|
|
[role="xpack"]
|
|
|
|
|
[[internal-users]]
|
|
|
|
|
=== Internal users
|
|
|
|
|
|
|
|
|
|
The {stack-security-features} use three _internal_ users (`_system`, `_xpack`,
|
|
|
|
|
and `_xpack_security`), which are responsible for the operations that take place
|
|
|
|
|
inside an {es} cluster.
|
|
|
|
|
|
|
|
|
|
These users are only used by requests that originate from within the cluster.
|
|
|
|
|
For this reason, they cannot be used to authenticate against the API and there
|
|
|
|
|
is no password to manage or reset.
|
|
|
|
|
|
|
|
|
|
From time-to-time you may find a reference to one of these users inside your
|
2019-11-19 19:08:46 -05:00
|
|
|
logs, including <<auditing,audit logs>>.
|
