anchor.diff:  
   . Change the passwords of the built in `kibana`, `logstash_system` and `elastic` users:
   +
  +--
   [source,shell]
   ----------------------------------------------------------
   curl -XPUT -u elastic 'localhost:9200/_xpack/security/user/elastic/_password' -H "Content-Type: application/json" -d '{
  
positive.code: }'
  ----------------------------------------------------------
  // NOTCONSOLE
  +
  NOTE: The default password for the `elastic` user is `changeme`.
  
  . Set up roles and users to control access to Elasticsearch and Kibana.
  For example, to grant _John Doe_ full access to all indices that match
  
negative.code: for those indices in Kibana, you could create an `events_admin` role and
  and assign the role to a new `johndoe` user.
  +
  --
  [source,shell]
  ----------------------------------------------------------
  curl -XPOST -u elastic 'localhost:9200/_xpack/security/role/events_admin' -H "Content-Type: application/json" -d '{
  