14 lines
530 B
Plaintext
14 lines
530 B
Plaintext
[role="xpack"]
|
|
[[internal-users]]
|
|
=== Internal users
|
|
|
|
{security} has three _internal_ users (`_system`, `_xpack`, and `_xpack_security`)
|
|
that are responsible for the operations that take place inside an {es} cluster.
|
|
|
|
These users are only used by requests that originate from within the cluster.
|
|
For this reason, they cannot be used to authenticate against the API and there
|
|
is no password to manage or reset.
|
|
|
|
From time-to-time you may find a reference to one of these users inside your
|
|
logs, including <<auditing, audit logs>>.
|