According to the Elasticsearch documentation as of 6.0, you can no longer run/supply a custom user/group unless you compile from source. I’m assuming that this is still the case for the opendistro version?
How would I go about building it with a custom user/group?
GitHub - opendistro-for-elasticsearch/opendistro-build: 🧰 Open Distro Build Scripts?