64 lines
2.3 KiB
Plaintext
64 lines
2.3 KiB
Plaintext
[roles="xpack"]
|
|
[[reset-elastic-password]]
|
|
== elasticsearch-reset-elastic-password
|
|
|
|
The `elasticsearch-reset-elastic-password` command resets the password for the
|
|
`elastic` <<built-in-users,built-in superuser>>.
|
|
|
|
[discrete]
|
|
=== Synopsis
|
|
|
|
[source,shell]
|
|
----
|
|
bin/elasticsearch-reset-elastic-password
|
|
[-a, --auto] [-b, --batch] [-E <KeyValuePair]
|
|
[-f, --force] [-h, --help] [-i, --interactive]
|
|
----
|
|
|
|
[discrete]
|
|
=== Description
|
|
|
|
Use this command to reset the password of the `elastic` superuser. By default, a
|
|
strong password is generated for you. To explicitly set a password, run the
|
|
tool in interactive mode with `-i`. The command generates (and subsequently
|
|
removes) a temporary user in the <<file-realm,file realm>> to run the request
|
|
that changes the `elastic` user password.
|
|
IMPORTANT: You cannot use this tool if the file realm is disabled in your `elasticsearch.yml` file.
|
|
|
|
This command uses an HTTP connection to connect to the cluster and run the user
|
|
management requests. The command automatically attempts to establish the connection
|
|
over HTTPS by using the `xpack.security.http.ssl` settings in
|
|
the `elasticsearch.yml` file. If you do not use the default config directory
|
|
location, ensure that the `ES_PATH_CONF` environment variable returns the
|
|
correct path before you run the `elasticsearch-reset-elastic-password` command. You can
|
|
override settings in your `elasticsearch.yml` file by using the `-E` command
|
|
option. For more information about debugging connection failures, see
|
|
<<trb-security-setup>>.
|
|
|
|
[discrete]
|
|
[[reset-elastic-password-parameters]]
|
|
=== Parameters
|
|
|
|
`-a, --auto`:: Resets the password of the `elastic` user to an auto-generated strong password. (Default)
|
|
|
|
`-b, --batch`:: Runs the reset password process without prompting the user for verification.
|
|
|
|
`-E <KeyValuePair>`:: Configures a standard {es} or {xpack} setting.
|
|
|
|
`-f, --force`:: Forces the command to run against an unhealthy cluster.
|
|
|
|
`-h, --help`:: Returns all of the command parameters.
|
|
|
|
`-i, --interactive`:: Prompts the user for the password of the `elastic` user. Use this option to explicitly set a password.
|
|
|
|
[discrete]
|
|
=== Examples
|
|
|
|
The following example resets the password of the `elastic` user to an auto-generated value and
|
|
prints the new password in the console.
|
|
|
|
[source,shell]
|
|
----
|
|
bin/elasticsearch-reset-elastic-password
|
|
----
|