From
logstash_system
The user Logstash uses when storing monitoring information in Elasticsearch.
The
logstash_systemuser is used internally within Logstash when monitoring is enabled for Logstash.
You want to look at Configuring Security in Logstash | Logstash Reference [6.2] | Elastic for setting up your own logstash user.