It's most likely that your instance has been replaced, and therefore the password has been reset. You can check that by going to the tab Instance health -> select an instance -> maximize a graph -> increase the duration to e.g. one week and check for any gaps in the data.

Settings like the password are stored on this instance, but I've also noticed it for internal users and index patterns for dashboards. When the instance is replaced, all this is gone.

You can prevent this in a couple of ways:

• In case you're using an instance in the T range, check if it has high CPU usage. For t3.small, you can run out of CPU credits and the baseline utilization per vCPU is 20% Consider using a non T range instance type.

• Use more powerful nodes

• Add more nodes