原英文版地址: https://www.elastic.co/guide/en/elasticsearch/reference/7.7/internal-users.html, 原文档版权归 www.elastic.co 所有
本地英文版地址: ../en/internal-users.html

Internal usersedit

The Elastic Stack security features use three internal users (_system, _xpack, and _xpack_security), which are responsible for the operations that take place inside an Elasticsearch cluster.

These users are only used by requests that originate from within the cluster. For this reason, they cannot be used to authenticate against the API and there is no password to manage or reset.

From time-to-time you may find a reference to one of these users inside your logs, including audit logs.