# Elasticsearch using incorrect user

**URL:** <https://discuss.elastic.co/t/elasticsearch-using-incorrect-user/62689>\
**Category:** Elasticsearch\
**Created:** [October 11, 2016, 8:36am UTC](https://discuss.elastic.co/t/elasticsearch-using-incorrect-user/62689 "2016-10-11T08:36:22Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![minniek](https://avatars.discourse-cdn.com/v4/letter/m/aeb1de/32.png) [@minniek](https://discuss.elastic.co/u/minniek)\
**Post date:** [October 11, 2016, 8:36am UTC](https://discuss.elastic.co/t/elasticsearch-using-incorrect-user/62689/1 "2016-10-11T08:36:23Z")

</div>

Hello everyone,  
When I run /etc/init.d/elasticsearch start, I am not able to get the correct user  
I am not able to set the user "elasticsearch". I set the variable ES\_USER but for a strange reason this parameter change to another user. Any ideas?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 11, 2016, 8:54am UTC](https://discuss.elastic.co/t/elasticsearch-using-incorrect-user/62689/2 "2016-10-11T08:54:07Z")

</div>

> [@minniek](#):
>
> When I run /etc/init.d/elasticsearch start, I am not able to get the correct user

What does this actually mean? Are you seeing something odd? Did you change something? What version are you on? How did you install ES?

You haven't really given any concrete details about a problem and what you are/aren't seeing.

---

<div class="post-metadata">

**Author:** ![minniek](https://avatars.discourse-cdn.com/v4/letter/m/aeb1de/32.png) [@minniek](https://discuss.elastic.co/u/minniek)\
**Post date:** [October 11, 2016, 8:59am UTC](https://discuss.elastic.co/t/elasticsearch-using-incorrect-user/62689/3 "2016-10-11T08:59:57Z")

</div>

I am trying to run ES version 2.4

In the file located at /etc/init.d/elasticsearch there is a parameter called "ES\_USER"

# Run Elasticsearch as this user ID and group ID

ES\_USER=elasticsearch  
ES\_GROUP=elasticsearch

It supossed to be "elasticsearch" by default . but when I run the service I got another user instead of "elasticsearch" and I got problems like permission denied, etc. I dont understand why this user changed.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 11, 2016, 9:02am UTC](https://discuss.elastic.co/t/elasticsearch-using-incorrect-user/62689/4 "2016-10-11T09:02:30Z")

</div>

> [@minniek](#):
>
> It supossed to be "elasticsearch" by default . but when I run the service I got another user instead of "elasticsearch" and I got problems like permission denied, etc. I dont understand why this user changed.

What user? Where are you seeing this? Can you show us logs?

Please, provide more information or we cannot help.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 10:13pm UTC](https://discuss.elastic.co/t/elasticsearch-using-incorrect-user/62689/5 "2017-07-05T22:13:28Z")

</div>