Is it possible to delete security index and then create it automatically on restart of Elasticsearch

Elastic Stack Elasticsearch
1

x pack is enabled and now I want to delete security index.
Then will it be automatically created on restart of Elasticsearch and will all the built users be created?

2

What are you trying to achieve by doing this?

Which version of Elasticsearch are you using?

If you remove the security index i believe all security configuration, including users and roles, will be deleted and it will be difficult to get the cluster up and running again.

3

Elastic version - 8.5.2
I want to clear all the data of security index
I have a user and I forgot the password of that user who is a superuser and manages my application data.
Is there any way to reset the password without providing old credentials.

Or If I use elastic user, I want to change its password via API
without providing previous credentials

4

I do not know for sure, but it sounds like the behavoiur you are asking for would be a potential security vulnerability.

5

Hmm.. It can be a security vulnerability
Can we use anonymous access to change password without credentials
Enabling anonymous access | Elasticsearch Guide [8.5] | Elastic

6

If anyone could log in and change passwords through anonymous access there would not be much point in having secured the cluster in the first place, would it?

7

Yeah.. that's true

8
2 Likes
9

Thank you for the information .. This works with the batch files. But I think via API we cannot do that

10

Hi @smiley_tamy Correct, You can not reset the password of any of the built-in users via the API only via the command line tools.

11

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.