Deleting users from elasticsearch but still appear on assignees

Elastic Stack Kibana
1

Hi, Is this intentional to delete users but still appear on assignees panel?

For example, i have user named “hytam” on elasticsearch (I previously deleted already) but still appearing on assignees.

In users page, there’s nothing user named hytam but on Security > Alerts > Assignees, it’s still there.

swappy-20251031-102304
swappy-20251031-102304453×312 13.4 KB

Step to reproduce:

  1. Create random user.
  2. log in into kibana.
  3. logout, and then switch to superuser account (example: elastic).
  4. delete random user.
  5. check on Security > Alerts > Assignees.

Thanks in advance!.

2

here’s user panel.

swappy-20251031-102143
swappy-20251031-1021431610×587 35.8 KB

3

Hello @naverlyn

Welcome to the Community!!

image
image1099×297 16.8 KB

1, Created User Demo1
2. With Elastic User , i was able to see all the 3 users (Demo1/Dummy/Elastic)
3. Deleted the Demo1 user from Kibana
4. Logged Out & Logged In again with Elastic
5. In Screen Security > Alerts > Assignees > Can still see user Demo1
6. I thought it maybe due to Assigned Alerts on this username because of which in the dropdown we were able to see the user
7. Even unassigned and saw that no alerts was assigned to user Demo1
8. Logged out & Logged in again still User is visible
9. Tried restarting Elasticsearch/Kibana as well but user is visible.

As per above performed steps it seems to be a bug as i see the same behavior as reported by you.

Thanks!!